"Windows Firewall" refers to the built in client firewall utility that ships with the Windows operating system. (It was previously named the Internet Connection Firewall.) By default, all Windows operating systems since Windows XP and Windows Server 2003 have shipped with this client.

learn more… | top users | synonyms (1)

15
votes
4answers
2k views

What can be done to properly re-enable the Windows Firewall on a domain?

BACKGROUND/RESEARCH I honestly believe that questions like this one: Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how? existed because Windows Admins in ...
14
votes
1answer
722 views

How can I back up my recommendation to NOT disable the Windows Firewall service?

I know from direct personal experience that disabling the Windows Firewall service on post-XP systems can lead to all sorts of networking problems, and that the proper way of disabling it is by ...
12
votes
3answers
23k views

Windows Advanced Firewall: What does “Edge Traversal” mean?

this should be a really simple one: In Advanced Windows Firewall on Windows Server 2008+, Properties > Advanced, what does "Edge Traversal" mean? I Googled it, of course, and was unable to come up ...
8
votes
2answers
11k views

Whats the difference between local and remote addresses in 2008 firewall address

In the firewall advanced security manager/Inbound rules/rule property/scope tab you have two sections to specify local ip addresses and remote ip addresses. What makes an address qualify as a local ...
6
votes
2answers
509 views

For an internet-facing, all-roles-in-one Exchange server, what do I need to let through the firewall?

As the result of a recent penetration test, in which we did not fare well, it has been brought to my attention that our internet facing, all-roles-in-one, Exchange 2010 SP3 server has no firewall in ...
6
votes
2answers
2k views

Inbound Windows Firewall Core Networking Rules

I've just purchase a Windows Server 2008 R2 VPS plan and I was alarmed to see the default configuration had Windows firewall disabled. I've enabled the firewall and disabled most of the inbound rules, ...
5
votes
1answer
664 views

Why won't Windows XP firewall use domain settings on boot?

Although my XP workstations are connected to the domain, after booting firewall.cpl reports they're "using non-domain settings". Official literature tells me it's an issue with the DNS suffix of its ...
5
votes
1answer
1k views

Can I use Win 2k8 R2 as an IPSEC client?

I'm trying to connect a win server 2008 R2 box to a juniper ssg firewall using a client-to-gateway IPSEC VPN. I tried to set it up in Windows Firewall with Advanced Security, but the connection ...
5
votes
1answer
366 views

Windows File Sharing not working

We have a workstation on our domain that we need to share a printer from, and it's not working. I also set up a shared folder to help with testing. Details: We are on a domain. All operations ...
4
votes
4answers
337 views

Is it a valid security decision to protected exposed RDP servers by restricting IP addresses with a firewall?

As you probably all know, new security flaws continue to emerge in RDP for Windows. I have googled and read about this issue, and possible fixes/solutions. It surprises me that no one mentions, to ...
4
votes
3answers
4k views

Is the firewall on Windows Server 2008 R2 sufficient?

I'm planning a few servers to be run on Rackspace cloud. Aside from using load balancers to control the flow of web traffic, how good is the Windows Firewall? I'm thinking in terms of throughput as ...
4
votes
3answers
11k views

How do I disable the firewall on a single interface in Windows 7?

We're using openvpn to provide access back from XP to work. We use AD policies to ensure the XP firewall is up when off the domain and down when on the domain. With openvpn, you end up with a new ...
4
votes
1answer
113 views

Is it easy or even possible yet to manage windows firewall with powershell?

I'm doing some POC testing on a server 2012 environment, and during initial firewall configuration I find myself going to the GUI repeatedly when I'd really much rather be able to write a script. I've ...
4
votes
1answer
2k views

How do you disable “stealth mode” on Windows Server 2008?

After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make. ...
4
votes
3answers
28k views

How do I get IIS working and accessible outside my network behind a router? [closed]

My machine is running Windows 7 Ultimate. Here's what I've done (successfully) so far: Installed IIS 7.5 with PHP over FastCGI Got it working! When I go to http://localhost/index.php , my PHP ...
4
votes
2answers
1k views

Windows Firewall - blocking IP address ranges en masse - performance considerations?

One of our services is an extranet for the exclusive use of our 200 employees across the UK. We're seeing a huge number of login attempts from China, Russia, Ukraine and Nigeria. I have large lists of ...
4
votes
1answer
312 views

Microsoft Exchange 2007 & Windows Firewall

I have been tasked with deploying Windows Firewall on our servers as an added measure of security. The more I investigate the ports in use on an Exchange server, the more I realize that this is a very ...
4
votes
2answers
194 views

Windows Firewall refusing connections unless logging turned on

From the Windows Mystery Caves: a user trying to access a Windows Server 2008 R2 Remote Desktop Session Host is getting network timeouts upon connection establishment attempts. The Remote Desktop ...
4
votes
1answer
243 views

Windows Firewall IPSec configuration, how to protect the AD

Here's my infrastructure configuration: All servers have public IP I've setup a GPO to enable IPSec on everyone of them with a "require for inbound and request for outbound" rule, for all server, ...
4
votes
0answers
84 views

Get-Process not working against remote Windows 7 clients

I have been trying to run Microsoft's GetNetworkStatistics script against remote computers to enable us to track what processes are using bandwidth along with other tools. I am unable to run the ...
4
votes
0answers
78 views

Windows 8 inbound IPsec authentication failing?

I am getting some very strange behavior out of the Windows 8 Advanced Firewall / IPsec implementation. It appears now that all inbound traffic that isn't return traffic from a previously contacted ...
4
votes
1answer
1k views

Windows firewall blocks nearly all traffic after reboot?

Sometimes when the systems boot they don't accept any inbound traffic at all and my IPSec rules don't work outbound - it appears that the server is stuck in some kind of initial post boot ...
3
votes
1answer
6k views

How can I allow RDP access to a Windows 2008R2 server from one IP?

I've been trying to secure RDP to a new Windows 2008R2 server (using Windows Firewall) by only allowing RDP traffic from one IP address. Under the "Computers" tab, it seems I can only allow user or ...
3
votes
1answer
8k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
3answers
3k views

Configuring many block IPs in Windows Firewall

I have a large number of remote IPs to specify in Windows Firewall for a blocking rule. The only way I know to enter them is by labouriously entering them an inbound rule's properties Scope tab. Is ...
3
votes
2answers
9k views

Configure Windows Firewall to block all except for specific traffic

I'm trying to configure Windows Firewall on Server 2008 R2 to block everything except for the traffic that I add to the rule list. I see there are three policies - public/private/domain. I've been ...
3
votes
2answers
2k views

Creating a whitelist for RDP access

Since people are getting unauthorized access to my Windows Server (bruteforced over several months..), I'd like to set up a whitelist for RDP access. I have tried the following with Windows Firewall ...
3
votes
2answers
2k views

How can I backup and restore my Windows 2003 Firewall Settings?

It seems that when I install TFS I just lost all my Windows Firewall settings. How can I back this up and restore them on Windows 2003?
3
votes
1answer
332 views

netsh advfirewall set store gpo: %COMPUTERNAME% does not work

I am in charge of a group of computers that process highly confidential data. They cannot be connected to the Internet or even the company network, only a network drive. So I wrote a batch file on the ...
3
votes
3answers
2k views

Configure Windows firewall blocking behaviour

Does anyone know if it is possible to configure the behaviour of Windows Firewall when it has determined that a packet is disallowed? By default, it will silently discard the packet and the source is ...
3
votes
2answers
580 views

Windows Advanced Firewall - adding Authorized Computers breaks rule

How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity? Background: I'm setting up a basic set of client rules that restrict ...
3
votes
1answer
3k views

Windows Firewall IP ban?

OK, question: I have a IIS webserver and Windows firewall. To allow incoming connections to IIS, I enabled port 80 and 8080. But now, how can I block a specific IP address/range on port 80 (=ban) ...
3
votes
3answers
6k views

Setting up FTP on Windows Server 2008, virtual machine

I am setting up a virtual machine with Windows Server 2008 that utilizes Hyper-V. I am trying to set up FTP access to the machine, but I cannot connect to the FTP server from my local machine. I can ...
3
votes
1answer
271 views

Windows Web Server Login Attempts

We have a cloud web server serving several e-commerce websites, which is running Windows Server 2008 R2 and IIS 7.5. We access the server via RDC. After looking at the windows security log I can see ...
3
votes
1answer
711 views

Slow SMB/CIFS to/from Win2008R2 Server

Dell R710 w/ Intel 82576 gigabit NIC (latest Intel drivers). I'm setting up a new Windows Server 2008 R2 SP1 & so far I've installed updates & configured the File Services & Web Server ...
3
votes
2answers
1k views

Applying outbound connection rules PER USER in Windows Firewall with Advanced Security

In the latest version of the Windows Firewall, included for example in Windows Server 2008 R2, you can block incoming connections and apply this rule only for a set of users (Users Tab in the rule ...
3
votes
2answers
902 views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
3
votes
1answer
306 views

Is the windows server 2008 r2 firewall in amazon ec2 not necessary

Under normal circumstances, is the windows server 2008r2 firewall, running on an amazon ec2 instance even necessary? Can it safely be turned off? It appears that thru the security groups, amazon is ...
3
votes
1answer
600 views

Why is file sharing over internet still working, despite all firewall exceptions for filesharing being disabled?

Every exception in my windows server firewall that starts with "File and Printer Sharing" is disabled (ordered by name, so that includes domain, public (active), and private profiles). The Network ...
3
votes
0answers
363 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
2
votes
4answers
1k views

Can I block all incoming requests with Windows Firewall?

For weeks now there's been someone on the company network that thinks it's funny to shut down my computer remotely. All I can say is thank GOD for file recovery otherwise I'd have lost 3 projects ...
2
votes
2answers
109 views

Does a public webserver need to accept incoming from more than port 80?

Probably in than email is outgoing means servers have to reply but beyond that, what's the bare minimum portlist that a public-facing webserver (iis7 with same-box sql) have to admit?
2
votes
6answers
29k views

Active FTP client blocked by Windows Firewall on Windows 7

I have an application that runs as a service and contains an FTP client. It needs to connect to an FTP server that only supports Active FTP. When I attempt to get a list of files or download a file, ...
2
votes
4answers
2k views

Can't connect to ftp port 21

I installed ftp server on Windows 2003, enabled 21 port in Firewall and I can connect "telnet localhost 21" but can't connect "telnet 77.168.0.1 21" What it can be?
2
votes
3answers
5k views

How can I use netsh to find a rule using a pattern

I'm wondering whether anyone in Microsoft has ever come to a situation where they can't remember a rule's name! The netsh advfirewall firewall show rule only accepts 1 name and no pattern matching ...
2
votes
3answers
2k views

ZoneAlarm vs Native Firewall on windows?

Which is the benefits to use ZoneAlarm instead of windows native firewall? Is it really necessary?
2
votes
3answers
3k views

How do I configure Windows Firewall for FTP Server

What ports do I need to open for me to be able to access Windows FTP server (running on Server 2008) for both active and passive FTP? Opening 21 on it's own is not enough.
2
votes
3answers
3k views

Allow incoming connections on Windows Server 2008 R2

Good day people. First, im new to Windows Server. I've always used Linux/Apache combo, but, my client has and AWS EC2 Windows Server 2008 R2 instance and he wants everything in there. Im working ...
2
votes
1answer
47 views

Is there another interface that I can use to manage the firewall in Windows 2008?

I hate the interface for managing firewall in Widows Server 2008. Is there another GUI interface that I can use? Free is great but I'd even accept a 3rd party solution.
2
votes
2answers
4k views

What exceptions should Windows Firewall have to allow network discovery?

I'm running Vista x64 at work (upgrading to Win7 on Monday), and I've had a problem for awhile. When I have Windows Firewall turned on, I'm unable to connect to my machine from any other machine on ...