"Windows Firewall" refers to the built in client firewall utility that ships with the Windows operating system. (It was previously named the Internet Connection Firewall.) By default, all Windows operating systems since Windows XP and Windows Server 2003 have shipped with this client.

learn more… | top users | synonyms (1)

15
votes
4answers
4k views

What can be done to properly re-enable the Windows Firewall on a domain?

BACKGROUND/RESEARCH I honestly believe that questions like this one: Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how? existed because Windows Admins in ...
14
votes
3answers
30k views

Windows Advanced Firewall: What does “Edge Traversal” mean?

this should be a really simple one: In Advanced Windows Firewall on Windows Server 2008+, Properties > Advanced, what does "Edge Traversal" mean? I Googled it, of course, and was unable to come up ...
14
votes
1answer
1k views

How can I back up my recommendation to NOT disable the Windows Firewall service?

I know from direct personal experience that disabling the Windows Firewall service on post-XP systems can lead to all sorts of networking problems, and that the proper way of disabling it is by ...
11
votes
2answers
20k views

Whats the difference between local and remote addresses in 2008 firewall address

In the firewall advanced security manager/Inbound rules/rule property/scope tab you have two sections to specify local ip addresses and remote ip addresses. What makes an address qualify as a local ...
8
votes
3answers
43k views

How do I get IIS working and accessible outside my network behind a router? [closed]

My machine is running Windows 7 Ultimate. Here's what I've done (successfully) so far: Installed IIS 7.5 with PHP over FastCGI Got it working! When I go to http://localhost/index.php , my PHP ...
6
votes
2answers
595 views

For an internet-facing, all-roles-in-one Exchange server, what do I need to let through the firewall?

As the result of a recent penetration test, in which we did not fare well, it has been brought to my attention that our internet facing, all-roles-in-one, Exchange 2010 SP3 server has no firewall in ...
6
votes
2answers
3k views

Inbound Windows Firewall Core Networking Rules

I've just purchase a Windows Server 2008 R2 VPS plan and I was alarmed to see the default configuration had Windows firewall disabled. I've enabled the firewall and disabled most of the inbound rules, ...
6
votes
2answers
3k views

Windows Firewall - blocking IP address ranges en masse - performance considerations?

One of our services is an extranet for the exclusive use of our 200 employees across the UK. We're seeing a huge number of login attempts from China, Russia, Ukraine and Nigeria. I have large lists of ...
6
votes
1answer
1k views

Can I use Win 2k8 R2 as an IPSEC client?

I'm trying to connect a win server 2008 R2 box to a juniper ssg firewall using a client-to-gateway IPSEC VPN. I tried to set it up in Windows Firewall with Advanced Security, but the connection doesn'...
6
votes
1answer
831 views

Windows File Sharing not working

We have a workstation on our domain that we need to share a printer from, and it's not working. I also set up a shared folder to help with testing. Details: We are on a domain. All operations ...
5
votes
3answers
5k views

Is the firewall on Windows Server 2008 R2 sufficient?

I'm planning a few servers to be run on Rackspace cloud. Aside from using load balancers to control the flow of web traffic, how good is the Windows Firewall? I'm thinking in terms of throughput as ...
5
votes
3answers
14k views

How do I disable the firewall on a single interface in Windows 7?

We're using openvpn to provide access back from XP to work. We use AD policies to ensure the XP firewall is up when off the domain and down when on the domain. With openvpn, you end up with a new ...
5
votes
1answer
4k views

Windows Firewall IP ban?

OK, question: I have a IIS webserver and Windows firewall. To allow incoming connections to IIS, I enabled port 80 and 8080. But now, how can I block a specific IP address/range on port 80 (=ban) ...
5
votes
1answer
716 views

Why won't Windows XP firewall use domain settings on boot?

Although my XP workstations are connected to the domain, after booting firewall.cpl reports they're "using non-domain settings". Official literature tells me it's an issue with the DNS suffix of its ...
4
votes
4answers
340 views

Is it a valid security decision to protected exposed RDP servers by restricting IP addresses with a firewall?

As you probably all know, new security flaws continue to emerge in RDP for Windows. I have googled and read about this issue, and possible fixes/solutions. It surprises me that no one mentions, to ...
4
votes
1answer
10k views

How can I allow RDP access to a Windows 2008R2 server from one IP?

I've been trying to secure RDP to a new Windows 2008R2 server (using Windows Firewall) by only allowing RDP traffic from one IP address. Under the "Computers" tab, it seems I can only allow user or ...
4
votes
1answer
3k views

How do you disable “stealth mode” on Windows Server 2008?

After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make. ...
4
votes
2answers
16k views

Configure Windows Firewall to block all except for specific traffic

I'm trying to configure Windows Firewall on Server 2008 R2 to block everything except for the traffic that I add to the rule list. I see there are three policies - public/private/domain. I've been ...
4
votes
1answer
124 views

Is it easy or even possible yet to manage windows firewall with powershell?

I'm doing some POC testing on a server 2012 environment, and during initial firewall configuration I find myself going to the GUI repeatedly when I'd really much rather be able to write a script. I've ...
4
votes
1answer
42 views

Copy a Windows Server Firewall address list from one rule to another using Powershell

I'm a little stuck on the documentation for the Firewall cmdlets in Windows server. I am trying to copy the address lists for the remote and local ips from one rule to another. I can get the list ...
4
votes
2answers
2k views

Applying outbound connection rules PER USER in Windows Firewall with Advanced Security

In the latest version of the Windows Firewall, included for example in Windows Server 2008 R2, you can block incoming connections and apply this rule only for a set of users (Users Tab in the rule ...
4
votes
1answer
398 views

Microsoft Exchange 2007 & Windows Firewall

I have been tasked with deploying Windows Firewall on our servers as an added measure of security. The more I investigate the ports in use on an Exchange server, the more I realize that this is a very ...
4
votes
1answer
663 views

Windows Web Server Login Attempts

We have a cloud web server serving several e-commerce websites, which is running Windows Server 2008 R2 and IIS 7.5. We access the server via RDC. After looking at the windows security log I can see ...
4
votes
2answers
339 views

Windows Firewall refusing connections unless logging turned on

From the Windows Mystery Caves: a user trying to access a Windows Server 2008 R2 Remote Desktop Session Host is getting network timeouts upon connection establishment attempts. The Remote Desktop ...
4
votes
1answer
385 views

Is the windows server 2008 r2 firewall in amazon ec2 not necessary

Under normal circumstances, is the windows server 2008r2 firewall, running on an amazon ec2 instance even necessary? Can it safely be turned off? It appears that thru the security groups, amazon is ...
4
votes
2answers
14k views

How to know currently open ports on the Windows Firewall?

On Windows XP and Windows Server 2003, I can know currently open ports on the Windows Firewall using the following command: netsh firewall show state However, on Windows 7 and Hyper-V Server 2008 ...
4
votes
1answer
274 views

Windows Firewall IPSec configuration, how to protect the AD

Here's my infrastructure configuration: All servers have public IP I've setup a GPO to enable IPSec on everyone of them with a "require for inbound and request for outbound" rule, for all server, ...
4
votes
5answers
10k views

Windows Firewall rule based on domain name instead of IP

I'm trying to allow a service to a set of machines via Windows Firewall. I'd like to add my home machine to the firewall but my home machine has a dynamic ip address. I use dyndns so that I have a ...
4
votes
1answer
97 views

Windows port forwarding, local machine to server

I'm working on Windows 8. I'm trying to connect to an OpenStack cloud which is hosted on a remote server but has a public IP to the API. However, making API calls require calls to additional services ...
4
votes
0answers
305 views

Get-Process not working against remote Windows 7 clients

I have been trying to run Microsoft's GetNetworkStatistics script against remote computers to enable us to track what processes are using bandwidth along with other tools. I am unable to run the ...
4
votes
0answers
107 views

Windows 8 inbound IPsec authentication failing?

I am getting some very strange behavior out of the Windows 8 Advanced Firewall / IPsec implementation. It appears now that all inbound traffic that isn't return traffic from a previously contacted ...
4
votes
1answer
2k views

Windows firewall blocks nearly all traffic after reboot?

Sometimes when the systems boot they don't accept any inbound traffic at all and my IPSec rules don't work outbound - it appears that the server is stuck in some kind of initial post boot ...
4
votes
0answers
438 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
3
votes
3answers
9k views

How can I use netsh to find a rule using a pattern

I'm wondering whether anyone in Microsoft has ever come to a situation where they can't remember a rule's name! The netsh advfirewall firewall show rule only accepts 1 name and no pattern matching ...
3
votes
1answer
9k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
3answers
3k views

Configuring many block IPs in Windows Firewall

I have a large number of remote IPs to specify in Windows Firewall for a blocking rule. The only way I know to enter them is by labouriously entering them an inbound rule's properties Scope tab. Is ...
3
votes
3answers
3k views

Configure Windows firewall blocking behaviour

Does anyone know if it is possible to configure the behaviour of Windows Firewall when it has determined that a packet is disallowed? By default, it will silently discard the packet and the source is ...
3
votes
2answers
2k views

Creating a whitelist for RDP access

Since people are getting unauthorized access to my Windows Server (bruteforced over several months..), I'd like to set up a whitelist for RDP access. I have tried the following with Windows Firewall ...
3
votes
2answers
3k views

How can I backup and restore my Windows 2003 Firewall Settings?

It seems that when I install TFS I just lost all my Windows Firewall settings. How can I back this up and restore them on Windows 2003?
3
votes
1answer
575 views

netsh advfirewall set store gpo: %COMPUTERNAME% does not work

I am in charge of a group of computers that process highly confidential data. They cannot be connected to the Internet or even the company network, only a network drive. So I wrote a batch file on the ...
3
votes
2answers
951 views

Windows Advanced Firewall - adding Authorized Computers breaks rule

How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity? Background: I'm setting up a basic set of client rules that restrict ...
3
votes
3answers
6k views

Setting up FTP on Windows Server 2008, virtual machine

I am setting up a virtual machine with Windows Server 2008 that utilizes Hyper-V. I am trying to set up FTP access to the machine, but I cannot connect to the FTP server from my local machine. I can ...
3
votes
1answer
305 views

Windows Server FIrewall (2012) Ipsec tunnel problems

I am new to Ipsec tunnels. I have successfully created a tunnel to a Cisco offsite router using a preshare key at a supplier. In Endpoints 1 : I have the servers ip address and the remote servers ip ...
3
votes
1answer
901 views

Slow SMB/CIFS to/from Win2008R2 Server

Dell R710 w/ Intel 82576 gigabit NIC (latest Intel drivers). I'm setting up a new Windows Server 2008 R2 SP1 & so far I've installed updates & configured the File Services & Web Server (...
3
votes
2answers
2k views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
3
votes
0answers
37 views

Do new Windows firewall rules affect currently open connections?

If I added a rule to windows firewall that blocked an ip or port currently used by an open connection, does that rule take effect immediately or only after the connection were closed? I.e, If I have ...
3
votes
1answer
702 views

Why is file sharing over internet still working, despite all firewall exceptions for filesharing being disabled?

Every exception in my windows server firewall that starts with "File and Printer Sharing" is disabled (ordered by name, so that includes domain, public (active), and private profiles). The Network ...
2
votes
4answers
2k views

Can I block all incoming requests with Windows Firewall?

For weeks now there's been someone on the company network that thinks it's funny to shut down my computer remotely. All I can say is thank GOD for file recovery otherwise I'd have lost 3 projects ...
2
votes
2answers
6k views

PowerShell Firewall Management

I have a bunch of machines that I need to enable Remote Scheduled Tasks Management (RPC), Remote Scheduled Tasks Management (RPC-EPMAP), and Windows Management Instrumentation (WMI-in) on for GPO ...
2
votes
2answers
113 views

Does a public webserver need to accept incoming from more than port 80?

Probably in than email is outgoing means servers have to reply but beyond that, what's the bare minimum portlist that a public-facing webserver (iis7 with same-box sql) have to admit?