Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

On Windows Firewall under an individual rule the scope tab allows you to define which ips are subject to the rule. One of the built in options is "Local subnet".

How can you add an additional subnet to this for windows to understand it is a trusted network segment?

Windows Firewall Scope tab

My question directly pertains to what windows (or domain) settings can be applied to add subnets directly to that predefined group "local subnet"

share|improve this question
up vote 5 down vote accepted

Local subnets is a special address group defined exclusively by the subnets of the NICs attached to the computer. You can't specify what goes in the group manually.

share|improve this answer
Well that's amazingly short sighted of Microsoft. – Chris Marisic Feb 17 '12 at 14:10
Not really... It's reliable, you know it will always and only contain those subnets. If you want to add other subnets, it's pretty easy, and can be done through GPO. I'm not sure why you think it's necessary to hide your subnets in a built-in group. – Chris S Feb 17 '12 at 14:46

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.