A: There are certainly improvements in usability and manageablity of the components you name. Network security is handled at multiple levels so I will answer from the perspective of NAP. Properly used, NAP will be the framework that protects you network. This is the 'wholistic' solution to protect both your network as well as the devices / end points connnected to the network. When I say NAP I am not talking about just the NAP agent and serer that comes in LH client and Server. I am also including the server side and client site elements that come from MS and other third parties. The client side agents are called SHAs, system health agents and each SHA will have a corresponding SHV (System Health Validator) on the infrastructure side. These pairs can address various aspects of network securiyt, policy compliance, and other network / ssytem health parameter. As an example one pair may address the anti-virus health aspect, another may address the configuration management; yet another may address patch lvl.
Jawad_Khaki_MSFT (Expert):
Q: Will LongHorn has any new telco (TAPI) application in addion to current Fax one ? For example VoIP, Voice Message Box (using Phone) etc.. ?
A: We will have p2p api enhancements for real-time communiation. No plans for enhancing TAPI.
Arvind_MSFT (Expert):
Q: Will the network stack be able to work at Layer2 and by the way provide and infrastructure for a future version of ISA working as a transparent Firewall ?
A: The LH network stack will operate over NDIS (IM) drivers at layer 2.
Jawad_Khaki_MSFT (Expert):
Q: Will Longhorn have a shared folder for photos, music and files by default like Windows XP?
Khaja_MSFT (Expert):
Q: Will Longhorn require a TPM Security Chip be integrated in the Desktop and Laptop hardware? If so, what version will Longhorn Require (1.1, 1.2, etc.)?
A: A TPM is NOT required for LH desktop and laptop.
Arvind_MSFT (Expert):
Q: Will Longhorn support TCP-IP only, no ore IPX etc ?
A: IPX is currently planned to NOT be supported on Longhorn.
Henry_MSFT (Expert):
Q: Since Longhorn'll be doing a lot with managed code, will there be managed interfaces to hook into the network stack, to e.g. create a managed firewall and similar?
A: We are doing a bunch of managed code work in LH - the .NET Frameworks Net Classes (System.Net) are in my group. Our current hooks for getting into the stack to do a firewall though are all in kernel mode, and managed code isn't supported in the kernel. Going forward we will extend these to user mode and at that point there will be managed code interfaces.
Christian_MSFT (Expert):
Q: Christian - scripting api available? or only selling out to netsh executions? for the scripting support you have outlined?
A: The netsh scripts calls the wireless autoconfiguration API, which will be publicly available.
Joe_MSFT (Expert):
Q: Will NAC/NAP be standard in LH for network access and WS health prior to allowing network access.
A: The current plan is to include client and server support for Network Access Protection (NAP) in Longhorn, which performs system health checks prior to allowing various levels of access to a managed network. Cisco NAC integration in Longhorn is under development. See
http://www.microsoft.com/nap for more information.
Jawad_Khaki_MSFT (Expert):
Q: Will NAC/NAP be standard in LH for network access and WS health prior to allowing network access.
A: NAP enhancements will enable IT network managers to enforce health check prior to networkn access. It will depend on the IT policies.
Henry_MSFT (Expert):
Q: Windows XP reduces simultanious connections to a HTTP (Web) server by default to 2-4. Will this be changed in Longhorn? (e.g. 5 simultanious connections allowed)
A: You are referring to the client connection limit, correct? We are conformant to the HTTP standard RFC which specifies the 2 connections/client/server limit. It is possible to change the limit programatically but the default will be standards conformant.
Harish_msft (Expert):
Q: Are there any plans to include/extend UPnP capabilities in LH?
A: LH will have support for Upnp 1.0. Additionally we are extending existing PnP to include network devices including upnp 1.0 devices. Customers will be able to "connect" a upnp 1.0 device to their PC and have a similar experience they have connecting a USB device in terms of the device being easily and securely available to the user. We are supporting the needs of our upnp 1.0 customers.
Jawad_Khaki_MSFT (Expert):
Q: Will PolicyNAT and PolicyRouting could be supported in LH timeframe ?
A: there will be some level of policy based configuration and we are eager to feedback from you in this space.
Henry_MSFT (Expert):
Q: Is WinInet going to be depricated at somepoint for something more reliable?
A: We currently have WinHTTP, which is our preferred unmanaged client API. We are also investing in improving the stability of WinInet for browsing experiences.
Jawad_Khaki_MSFT (Expert):
Q: Will Longhorn support ActiveSync over Bluetooth syncronization and browsing from mobile devices?
A: Can be done today with sp2. User experience can and will be improved.
Arvind_MSFT (Expert):
Q: What will be the new default exemptions for IPSec? Will the interface be changed?
A: There will be an improved policy/configuration UI for IPsec on Longhorn. Exemptions can be set through Group Policy or local configuration.
Christian_MSFT (Expert):
Q: What can you share of ad hoc networks, which is exciting area, but likely will also excite the cracker crowd - seems like MS will need to innovate to make this simple yet safe.
A: We are doing several things. We will make it easy to safely create a secure ad hoc network. We will also make sure that ad hoc networks will not be confused with infrastructure networks, and that administrators can easily control the list of networks to which stations should or should not connect.
Jawad_Khaki_MSFT (Expert):
Q: Will WINS still exist in Longhorn ?
A: Yes. For compatibility reasons. DNS is already an option today.
Arvind_MSFT (Expert):
Q: Will NetBIOS finally be put to rest in LH?
A: We're investigating retiring NetBIOS, but it isn't clear whether this will happen in Longhorn.
Jawad_Khaki_MSFT (Expert):
Q: Are there any plans for better MOM packs for networking components?
A: Yes.
Harish_msft (Expert):
Q: Will the LH home networking utilize both UPnP and WS* or just UPnP ?
A: LH will support both. Upnp 1.0 for extisting and backward compatbilty and WS for future network devices.
Arvind_MSFT (Expert):
Q: Oooh, both protocols on single socket. Will older applications be able to accept inbound IPv6 connections if they're listening on 0.0.0.0? Or do they additionally listed on :: too?
A: No to the first question, and yes to the second. "Older" applications need to be using the correct sockaddr structures as well in order to work over IPv6.
Christian_MSFT (Expert):
Q: What level of effort are you extending to test for security bugs in the new IP stack and 802.11 stack? Threat modeling, manual testing, fuzzing - there's tons to do with networking stacks.
A: All Longhorn components are required to undergo threat modelling, code inspections, and extensive testing to ensure the best possible quality and security. Critical components like TCP-IP and 802.11 get special attention, and we will definitely study and test them as much as we can!
Henry_MSFT (Expert):
Q: What is MSFT doing to help assist the transition in the IT industry to IPV6 ? And... when do you expect to see corporate take up of IPV6?
A: We are pushing transition technologies (6to4, ISATAP, Teredo) heavily. Our message to the industry is "move the applications, get them IPv6 ready, rely on transition techologies until the infrastructure is in place". We are working with IGD vendors to get them to support 6to4 in their consumer products, for example. We believe there is a lot of value in IPv6 in a transition environment and that application demand will drive infrastructure upgrade.
As for corporate uptake of IPv6 - this will be driving by compelling applications and user demand. Longhorn will be a big piece of this as it supports IPv6 completely and the peer-to-peer framework that is part of Longhorn will require IPv6 to run.
Dave_MSFT (Expert):
Q: Will there be more command line tools available for the networking component of Longhorn or are you making more GUI based?
A: Yes there is additional command-line functionality available, but there is also more GUI functionality. The goal is that the same configuration/statistics can be done via either method.
Joe_MSFT (Expert):
Q: Willl Longhorn's networking documentation have a way for members of the community to provide publicly-viewable feedback/additions?
A: The current plan being considered for Longhorn product documentation is to allow all customers to provide feedback for help topics that are online. I am not sure of the plans for allowing community members to review prior to the help being finalized.
Arvind_MSFT (Expert):
Q: Arvid I mean using Dos to execute ipconfig.exe, and since 64bit doesn't support 16 bit apps will it appear as a 64 bit app or even 32 bit app?
A: There will be a 64-bit version of ipconfig.exe on 64-bit versions of Longhorn. Does this clarify? Thanks.
Arvind_MSFT (Expert):
Q: As I understand it, Windows Filtering Platform will expose a common filtering methods to 3rd party firewalls. Does this extend to improved logging functionality, either built in, or with a 3rd party tool?
A: There will be improved built-in logging functionality in Longhorn, and WFP will support logging by 3rd party products as well.
Jawad_Khaki_MSFT (Expert):
Q: Any improvements to come from networked printers ?
A: Longhorn will support printers that use the web services framework. Harish can fill in more.
Joe_MSFT (Expert):
Q: Will the IP stack auto configure to IPV4 or V6 if the network supports it ?
A: The current behavior being considered for Longhorn is to enable both the IPv4 and IPv6 stacks by default and to attempt to configure both stacks based on the presence of DHCP servers, local advertising routers, and the autoconfiguring behavior for both IPv4 and IPv6.
Henry_MSFT (Expert):
Q: Thansk Henry .. can you expand on QOS diagnostics ? is that more just self healing/event response kind of scenarios? (e.g. network slows down .. do action x ) or ..
A: More about telling you why your application doesn't work. For example, if you're trying to stream video off a server but the network bandwidth is chewed up for some other reason (a game, another video stream, etc) we'd like to be able to inform the user/application that they can't get the bandwidth they need, but if they shut down the activity on machine X they should be able to.
Of course, we're also investing in cooperative admission control protocols, so participating devices & machines will be able to avoid this problem.
Christian_MSFT (Expert):
Q: Regarding adhoc networks, will they be local network only, or can I set up an arbitrary host list that'll make up the adhoc network? E.g. multiple hosts across the internet?
A: Wireless ad hoc networks will by definition be local -- all stations must be in radio range.
Arvind_MSFT (Expert):
Q: what about the limits imposed on TCP/IP on XP SP2 that broke up some p2p apps?
A: I assume the reference is to connection-rate limiting aimed at throttling spread of viruses - if so, we're investigating improving the stack behavior.
gursharan MSFT (Expert):
Q: Do you have plans to include some peer-to-peer enabled apps in LH, eg. P2P update management, file sharing?
A: Yes we plan to provide some out of the box user experience that is based on use of P2P platform capabilities.
Christian_MSFT (Expert):
Q: do you plan to make public the current wireless zero configuration API to manage WIFI networks ? or something at the same abstraction level ?
A: The wireless autoconfiguration client is being rewritten. It will have an open configuration API.
Azfar Moazzam - MSFT (Moderator):
Q: Castle Service: Will I be able to set up a list of FQDNs the service should try to contact, to set up the adhoc domain? This would allow to set up a Castle domain over the Internet, instead just the local network, using dynamic DNS services.
A: Castle is going to be focused on Home Networks that are primarily single subnet. The castle discovery mechanism will work over single subnet. Castle is not designed to bring in hosts that are connected over the network.
Jawad_Khaki_MSFT (Expert):
Q: Any Support for Network Scripting
A: netsh does provide some level of support today. wmi providers also provide
vb scriptability
Henry_MSFT (Expert):
Q: How much easier will LH make firewall development? Will we get an up-to-date C++ interface to work with?
A: It will make it significantly easier. That's the whole goal of the WFP (Windows Filtering Platform) effort. There will be up to date, clearly documented interfaces. We're also investing in improving LSP and NDIS filter driver support, which are also often used by host firewalls.
gursharan MSFT (Expert):
Q: Will networking be easier for home users, eg auto discover each computer on the network then create secure connections for sharing data ? I know many that have so many problems sharing files on a home network
A: Making home networking easier is a key focus in Longhorn; among the aspects made simpler are setup, discovery of network resources, access and use of networked resources, diagnostics, roaming, etc. Considerable effort is going into making file sharing simple.
Henry_MSFT (Expert):
Q: Are we seeing more adoption of QOS tagging in consumer devices ?
A: This will be more important as consumer networking devices become more important. We think this is key thing going forward and we are working with the industry to try and accelerate this.
Henry_MSFT (Expert):
Q: Will be there a possibility to easely configure bandwith limitations for applications, or if the pc is an ics host for computers?
A: Yes, programatically, or via group policies. Are you interested in a specific UI configuration for this?
Jawad_Khaki_MSFT (Expert):
Q: Will there be a "real" IPSec client in Longhorn, or just the PPTP / L2TP vpn clients?
A: Windows supports IPSec for host-to-host as well as remote access scenarios since windows 2000. Support is pretty standard. What do you consider "real" ipsec? We will add support for IPv6 IPSec support.
Arvind_MSFT (Expert):
Q: What with the LH firewall, are you planning to make something like iptables?
A: Can you please elaborate on the functionality you are looking for?
Dave_MSFT (Expert):
Q: When using multiple IP on the same interface, could it possible to isolate application context between IP traffic parent trough that phys. interface (like when running those applications each on in a separe Virtual PC sharing the same physical internface)?
A: We have heard requests for this over time. As you mentioned, this is already possible through Virtual PC, and we are investigating ways to provide this capability in the stack in the future.
Azfar Moazzam - MSFT (Moderator):
Q: what is happening with network places in LH?
A: There is going to be a Network Explorer in Longhorn that will show the PCs and devices on your network. Users will be able to organize the PCs and users in different sorting order and will show PCs in the differnet workgroups and domains.
Arvind_MSFT (Expert):
Q: Please kill NetBIOS!
A: Can you elaborate - are you asking to drop the API NetBIOS or something more?
Khaja_MSFT (Expert):
Q: What improvements in security point of view will Longhorn's networking component present?
A: A significant improvement in LH from a network health as well as a end-point (Desktop and serever) health perspective is NAP. It is a suite of components in the client and the server that works in a coordinated fashion with other MS and third party applications to ensure policy compliance of systems that connect to the network. This should do a great deal to improve security and mangeability of security for your desktops and the network.
Henry_MSFT (Expert):
Q: If I am streaming audio or video over the net and downloading will the download interupt the streaming or will it be clever enough to reduce the speed of the download ?
A: We are looking at this...some of this is dependent on the applications. We certainly support the APIs and framework needed to do this in LH if applications use them. This is part of our QoS support.
Harish_msft (Expert):
Q: will LH support audio profiles for bluetooth?
A: This is a high priority profile for us. We will support it, but we are still determing whether it will be inbox or not. We will make a decision soon by beta 1.
Arvind_MSFT (Expert):
Q: Will longhorn be able to use multiple default gateways for computers with mutlipe nics?
A: Yes. Did you have a particular case/scenario in mind?
gursharan MSFT (Expert):
Q: In order to make in home wireless networks more secure how will LH address wide open wireless networks
A: We have been addressing this quite aggressively since the release of Windows Connect Now effortless and secure WiFi network setup shipped with XP SP2. Longhorn will provide several other mechanisms for effortless, setup of secure wireless networks as I have already indicated in prior answers. The goal is that all wireless networks become secured since it is easy to do so.
Jawad_Khaki_MSFT (Expert): How exiciting is voice over Wireless 9WiFi) for enterprise scenarios?
Dave_MSFT (Expert):
Q: In IPv6, will be available to select source address when making a connection? Currently not available in Windows 2003.
A: At the sockets layer, it is possible to select the source address when making a connection, including in XP and 2003, by binding to the source address prior to the connect call.
Arvind_MSFT (Expert):
Q: When will we first get to play with WFP? WinHEC? PDC?
A: We plan to make WFP documentation and samples available with WinHEC.
gefunden bei
www.hackerboard.de