Windows Firewall (previously named the Internet Connection Firewall) is a firewall client included by default in Microsoft operating systems since Windows XP and Windows Server 2003.

learn more… | top users | synonyms

15
votes
4answers
1k views

What can be done to properly re-enable the Windows Firewall on a domain?

BACKGROUND/RESEARCH I honestly believe that questions like this one: Using GPO in Active Directory domain to force workstations Windows Firewall to disabled - how? existed because Windows Admins in ...
14
votes
1answer
481 views

How can I back up my recommendation to NOT disable the Windows Firewall service?

I know from direct personal experience that disabling the Windows Firewall service on post-XP systems can lead to all sorts of networking problems, and that the proper way of disabling it is by ...
12
votes
3answers
19k views

Windows Advanced Firewall: What does “Edge Traversal” mean?

this should be a really simple one: In Advanced Windows Firewall on Windows Server 2008+, Properties > Advanced, what does "Edge Traversal" mean? I Googled it, of course, and was unable to come up ...
7
votes
2answers
6k views

Whats the difference between local and remote addresses in 2008 firewall address

In the firewall advanced security manager/Inbound rules/rule property/scope tab you have two sections to specify local ip addresses and remote ip addresses. What makes an address qualify as a local ...
6
votes
2answers
2k views

Inbound Windows Firewall Core Networking Rules

I've just purchase a Windows Server 2008 R2 VPS plan and I was alarmed to see the default configuration had Windows firewall disabled. I've enabled the firewall and disabled most of the inbound rules, ...
5
votes
1answer
570 views

Why won't Windows XP firewall use domain settings on boot?

Although my XP workstations are connected to the domain, after booting firewall.cpl reports they're "using non-domain settings". Official literature tells me it's an issue with the DNS suffix of its ...
5
votes
1answer
845 views

Can I use Win 2k8 R2 as an IPSEC client?

I'm trying to connect a win server 2008 R2 box to a juniper ssg firewall using a client-to-gateway IPSEC VPN. I tried to set it up in Windows Firewall with Advanced Security, but the connection ...
4
votes
4answers
335 views

Is it a valid security decision to protected exposed RDP servers by restricting IP addresses with a firewall?

As you probably all know, new security flaws continue to emerge in RDP for Windows. I have googled and read about this issue, and possible fixes/solutions. It surprises me that no one mentions, to ...
4
votes
3answers
3k views

Is the firewall on Windows Server 2008 R2 sufficient?

I'm planning a few servers to be run on Rackspace cloud. Aside from using load balancers to control the flow of web traffic, how good is the Windows Firewall? I'm thinking in terms of throughput as ...
4
votes
1answer
106 views

Is it easy or even possible yet to manage windows firewall with powershell?

I'm doing some POC testing on a server 2012 environment, and during initial firewall configuration I find myself going to the GUI repeatedly when I'd really much rather be able to write a script. I've ...
4
votes
1answer
2k views

How do you disable “stealth mode” on Windows Server 2008?

After reading this article and this one I've decided to change all our firewalls to reject instead of block packets in most cases. My experience corroborates the arguments these articles make. ...
4
votes
1answer
257 views

Microsoft Exchange 2007 & Windows Firewall

I have been tasked with deploying Windows Firewall on our servers as an added measure of security. The more I investigate the ports in use on an Exchange server, the more I realize that this is a very ...
4
votes
2answers
89 views

Windows Firewall refusing connections unless logging turned on

From the Windows Mystery Caves: a user trying to access a Windows Server 2008 R2 Remote Desktop Session Host is getting network timeouts upon connection establishment attempts. The Remote Desktop ...
4
votes
1answer
213 views

Windows Firewall IPSec configuration, how to protect the AD

Here's my infrastructure configuration: All servers have public IP I've setup a GPO to enable IPSec on everyone of them with a "require for inbound and request for outbound" rule, for all server, ...
4
votes
1answer
934 views

Windows firewall blocks nearly all traffic after reboot?

Sometimes when the systems boot they don't accept any inbound traffic at all and my IPSec rules don't work outbound - it appears that the server is stuck in some kind of initial post boot ...
3
votes
2answers
7k views

What firewall ports need to be open for Active Directory?

I want to run DFS replication between a couple of servers. It's my understanding that the servers need to be part of a domain for this. Being able to give people a username and password that works on ...
3
votes
1answer
4k views

How can I allow RDP access to a Windows 2008R2 server from one IP?

I've been trying to secure RDP to a new Windows 2008R2 server (using Windows Firewall) by only allowing RDP traffic from one IP address. Under the "Computers" tab, it seems I can only allow user or ...
3
votes
3answers
9k views

how do I disable the firewall on a single interface in Windows 7?

We're using openvpn to provide access back from XP to work. We use AD policies to ensure the XP firewall is up when off the domain and down when on the domain. With openvpn, you end up with a new ...
3
votes
2answers
1k views

Creating a whitelist for RDP access

Since people are getting unauthorized access to my Windows Server (bruteforced over several months..), I'd like to set up a whitelist for RDP access. I have tried the following with Windows Firewall ...
3
votes
2answers
2k views

How can I backup and restore my Windows 2003 Firewall Settings?

It seems that when I install TFS I just lost all my Windows Firewall settings. How can I back this up and restore them on Windows 2003?
3
votes
1answer
117 views

netsh advfirewall set store gpo: %COMPUTERNAME% does not work

I am in charge of a group of computers that process highly confidential data. They cannot be connected to the Internet or even the company network, only a network drive. So I wrote a batch file on the ...
3
votes
3answers
2k views

Configure Windows firewall blocking behaviour

Does anyone know if it is possible to configure the behaviour of Windows Firewall when it has determined that a packet is disallowed? By default, it will silently discard the packet and the source is ...
3
votes
2answers
355 views

Windows Advanced Firewall - adding Authorized Computers breaks rule

How can adding a 'only allow connections to these computers' setting in an an otherwise working IPSec rule break connectivity? Background: I'm setting up a basic set of client rules that restrict ...
3
votes
1answer
3k views

Windows Firewall IP ban?

OK, question: I have a IIS webserver and Windows firewall. To allow incoming connections to IIS, I enabled port 80 and 8080. But now, how can I block a specific IP address/range on port 80 (=ban) ...
3
votes
3answers
5k views

Setting up FTP on Windows Server 2008, virtual machine

I am setting up a virtual machine with Windows Server 2008 that utilizes Hyper-V. I am trying to set up FTP access to the machine, but I cannot connect to the FTP server from my local machine. I can ...
3
votes
1answer
45 views

Windows Web Server Login Attempts

We have a cloud web server serving several e-commerce websites, which is running Windows Server 2008 R2 and IIS 7.5. We access the server via RDC. After looking at the windows security log I can see ...
3
votes
1answer
568 views

Slow SMB/CIFS to/from Win2008R2 Server

Dell R710 w/ Intel 82576 gigabit NIC (latest Intel drivers). I'm setting up a new Windows Server 2008 R2 SP1 & so far I've installed updates & configured the File Services & Web Server ...
3
votes
1answer
122 views

Windows Firewall: Remote Desktop block action by local policy

On a fresh domain-joined Server 2012 R2 install I see a peculiarity where an enabled "Remote Desktop" rule is set to Block in the Domain profile: As block rules take precedence over allow rules, I ...
3
votes
1answer
224 views

Is the windows server 2008 r2 firewall in amazon ec2 not necessary

Under normal circumstances, is the windows server 2008r2 firewall, running on an amazon ec2 instance even necessary? Can it safely be turned off? It appears that thru the security groups, amazon is ...
3
votes
2answers
642 views

Applying outbound connection rules PER USER in Windows Firewall with Advanced Security

In the latest version of the Windows Firewall, included for example in Windows Server 2008 R2, you can block incoming connections and apply this rule only for a set of users (Users Tab in the rule ...
3
votes
0answers
57 views

Windows 8 inbound IPsec authentication failing?

I am getting some very strange behavior out of the Windows 8 Advanced Firewall / IPsec implementation. It appears now that all inbound traffic that isn't return traffic from a previously contacted ...
3
votes
1answer
520 views

Why is file sharing over internet still working, despite all firewall exceptions for filesharing being disabled?

Every exception in my windows server firewall that starts with "File and Printer Sharing" is disabled (ordered by name, so that includes domain, public (active), and private profiles). The Network ...
3
votes
0answers
329 views

Firewall “Connection Security” when there is no trust and NATing between the two computers

First a little explanation of my network topology. I have a internal domain, and edge network domain. There is no trust between the two domains (and IT will not allow a one way trust to be set up ...
2
votes
4answers
1k views

Can I block all incoming requests with Windows Firewall?

For weeks now there's been someone on the company network that thinks it's funny to shut down my computer remotely. All I can say is thank GOD for file recovery otherwise I'd have lost 3 projects ...
2
votes
2answers
107 views

Does a public webserver need to accept incoming from more than port 80?

Probably in than email is outgoing means servers have to reply but beyond that, what's the bare minimum portlist that a public-facing webserver (iis7 with same-box sql) have to admit?
2
votes
3answers
2k views

Configuring many block IPs in Windows Firewall

I have a large number of remote IPs to specify in Windows Firewall for a blocking rule. The only way I know to enter them is by labouriously entering them an inbound rule's properties Scope tab. Is ...
2
votes
4answers
2k views

Can't connect to ftp port 21

I installed ftp server on Windows 2003, enabled 21 port in Firewall and I can connect "telnet localhost 21" but can't connect "telnet 77.168.0.1 21" What it can be?
2
votes
2answers
6k views

Configure Windows Firewall to block all except for specific traffic

I'm trying to configure Windows Firewall on Server 2008 R2 to block everything except for the traffic that I add to the rule list. I see there are three policies - public/private/domain. I've been ...
2
votes
3answers
2k views

ZoneAlarm vs Native Firewall on windows?

Which is the benefits to use ZoneAlarm instead of windows native firewall? Is it really necessary?
2
votes
3answers
3k views

How do I configure Windows Firewall for FTP Server

What ports do I need to open for me to be able to access Windows FTP server (running on Server 2008) for both active and passive FTP? Opening 21 on it's own is not enough.
2
votes
3answers
2k views

Allow incoming connections on Windows Server 2008 R2

Good day people. First, im new to Windows Server. I've always used Linux/Apache combo, but, my client has and AWS EC2 Windows Server 2008 R2 instance and he wants everything in there. Im working ...
2
votes
3answers
3k views

How can I use netsh to find a rule using a pattern

I'm wondering whether anyone in Microsoft has ever come to a situation where they can't remember a rule's name! The netsh advfirewall firewall show rule only accepts 1 name and no pattern matching ...
2
votes
1answer
47 views

Is there another interface that I can use to manage the firewall in Windows 2008?

I hate the interface for managing firewall in Widows Server 2008. Is there another GUI interface that I can use? Free is great but I'd even accept a 3rd party solution.
2
votes
2answers
3k views

What exceptions should Windows Firewall have to allow network discovery?

I'm running Vista x64 at work (upgrading to Win7 on Monday), and I've had a problem for awhile. When I have Windows Firewall turned on, I'm unable to connect to my machine from any other machine on ...
2
votes
1answer
170 views

How to prevent Skype DDOS [duplicate]

Is there a way to monitor number of attempted Skype connections on a specified port and dynamically firewall off the offending IPs if they break a certain threshhold within a specific time limit - in ...
2
votes
2answers
2k views

Windows 2008 R2 Server with 2 ip address, how to only enable RDP to one address

As the title says we have a Windows 2008 R2 Server with 2 IP address. Currently, we can connect via RDP to both IP addresses, however, we want to block/disable RDP connections that attempt to connect ...
2
votes
3answers
18k views

How do I get IIS working and accessible outside my network behind a router? [closed]

My machine is running Windows 7 Ultimate. Here's what I've done (successfully) so far: Installed IIS 7.5 with PHP over FastCGI Got it working! When I go to http://localhost/index.php , my PHP ...
2
votes
1answer
1k views

Windows Server 2008 R2 Firewall — Block ICMP except specific IPs

this is half a minute work with any firewall, but with the built-in firewall on Windows 2008 R2, I am stuck here for half an hour. I want to block all incoming ICMP requests to my server, EXCEPT ...
2
votes
1answer
908 views

DCOM Access Issues through Windows Server 2008 Firewall

I am trying to connect remotely to a Windows Server 2008 Machine through WMI Protocol using J-Interop Library. Although I have not been able to configure the firewall properly even after following ...
2
votes
2answers
527 views

Is Windows firewall secure enough?

I have Windows server 2008 R2 running on Rackspace network and I'm having difficult times to secure it behind a linux and iptables... I would like to know if the windows firewall is secure enough to ...