Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I am setting up a Windows Server 2008 R2 lab environment in VMWare workstation and attempting where possible to use Windows Server 2008 R2 to implement machines that serve specific roles within that environment. Using the "Network Policy and Access Services" role I have been able to setup a machine that can server as a NAT router. The issue is that any and all connections are allowed outbound. Is there a way to restrict what outbound connections are allowed?

share|improve this question

1 Answer 1

up vote 0 down vote accepted

You can control outbound connections from the server itself using Windows Firewall with AS.

You can't control the outbound connections from NAT'ed clients with a third party system:

Bottom line is, if you need a firewall product capable of filtering traffic as it is being routed between different NICs on the server, you need to install Microsoft Forefront Threat Management Gateway 2010.

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsServer2008/AdminTips/Network/WindowsFirewalldoesntfilterroutedIPtraffic.html

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.