User Tools

Site Tools


computing:security:windows_firewall

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
computing:security:windows_firewall [2012/05/08 12:30]
gcooper created
computing:security:windows_firewall [2014/07/26 11:51] (current)
gcooper
Line 4: Line 4:
  
 :!: You can use Computer Startup scripts as they run as the LocalSystem account. :!: You can use Computer Startup scripts as they run as the LocalSystem account.
 +
 +===== Enable ICMP (Ping) Responses =====
 +
 +Enable the existing rule(s) for:
 +
 +<file>
 +File and Printer Sharing (Echo Request - ICMPv4-In)
 +</file>
  
 ===== Manage with Group Policy ===== ===== Manage with Group Policy =====
 +
 +==== Windows XP/2003 ====
  
 http://technet.microsoft.com/en-us/library/bb490626.aspx http://technet.microsoft.com/en-us/library/bb490626.aspx
  
 +http://technet.microsoft.com/en-us/library/bb490616.aspx
 +
 +Edit an existing or create a new Group Policy Object (GPO)
 +
 +**Computer Configuration -> Policies -> Administrative Templates -> Network -> Network Connections -> Windows Firewall**
 +
 +Choose the proper profile to modify, //Standard// or //Domain//, if you are on a domain-based network.
 +
 +Here are some settings to:
 +
 +  * Enable firewall on all workstations
 +  * Allow Remote Desktop connections
 +  * Enable WMI
 +  * Enable AVG Admin remote installations
 +
 +^Setting^Enabled^Other Settings or Notes^
 +|Windows Firewall: Protect all network connections|enabled|Enable the Windows Firewall|
 +|Windows Firewall: Allow remote administration exception|enabled|IP address of your management host|
 +|Windows Firewall: Allow ICMP exceptions|enabled|Allow inbound echo request|
 +|Windows Firewall: Allow Remote Desktop exception|enabled|comma separated list of allowed IP addresses or networks|
 +|Windows Firewall: Define port exceptions|enabled|135:TCP:*:enabled:TCP_135 and 135:UDP:*:enabled:UDP_135|
 +
 +==== Windows 7/2008 ====
 +
 +http://www.grouppolicy.biz/2010/07/how-to-manage-windows-firewall-settings-using-group-policy/
 +
 +**Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Windows Firewall with Advanced Security**
 +
 +:!: Note that settings from the older XP/2003 firewall will also still be applied and may conflict!
 +
 +
 +
 +
 +===== Manage with Batch Files =====
  
 +http://community.spiceworks.com/topic/103535-is-there-a-way-to-run-a-netsh-command-without-admin-rights
  
 +http://www.ehow.com/how_7517044_use-vbs-netsh.html
computing/security/windows_firewall.1336501810.txt.gz · Last modified: 2012/05/08 12:30 by gcooper