Windows Server 2016 has a firewall called 'Windows Firewall with Advanced Security'. This lesson will cover how to access the firewall and the settings available.
Windows Firewall with Advanced Security
Windows Server 2016 is installed with Windows Firewall with Advanced Security already installed and configured. The default configuration allows all traffic out and limits inbound traffic.
A firewall is one part of a security policy required for operation of a server or network. Windows Firewall with Advanced Security reduces the risk of security threats and safeguards data. Third-party security software may be deployed on a server and the server firewall may be disabled or have some of its function disabled.
Accessing the Firewall
The firewall app in Server 2016 can be accessed by several means:
- From command line: type 'wf.msc'
- From Windows UI: Click search and type 'Windows Firewall' and select 'Windows Firewall with Advanced Security'
- MMC: Add snap-in for 'Windows Firewall with Advanced Security' and access the remote server from there
Firewall Domains
Windows Firewall with Advanced Security has three Profiles available to the user. Each can have different rules.
Domain Profile: This controls traffic to network which uses the same domain controller as the server being administered.
Private Profile: This controls traffic with the local server or network, which is generally behind a NAT device, such as home or small business networks.
Public Profile: This controls traffic to and from all networks other than domain networks. In practice, this affects all direct connections to the public internet.
Usually domain profile has fewer rules than public because it is assumed that all computers on the network are authenticated.
Rules
There are two sets of Rules that can be applied, 'Inbound' and 'Outbound'. On first installation, there will already be some rules present. Rules can be present but not necessarily enabled. All active (enabled) rules have a green tick beside them.
Enabling and disabling
Right-clicking on a rule will allow it to be enabled or disabled (depending on whether it is already enabled or disabled).
New Rule
Creating a new rule is done by clicking on 'New Rule' in the 'Actions' panel on the right side of the firewall app. Once selected, the user can choose from creating a rule for several situations:
- Program rule that applies only to a specific program
- Port rule that applies to a TCP or UDP port only
- Predefined rule which is a drop-down menu of built-in rules
- Custom which allows a combination program, port, and IP address within the rule
Any rule can be applied to any combination of domain, private or public profiles.
Editing rules
Any rule whether enabled or not can be edited. Right-clicking on a rule will allow its properties to be amended. This will open a dialog similar to the one available when creating a new rule. Note that predefined rules cannot have all their properties edited.
Copy, paste, delete
Right-clicking on a rule will allow the following:
- Any rule, whether enabled or not can be copied and then pasted.
- Any rule whether enabled or not can be deleted.
Lesson Summary
Windows Firewall with Advanced Security is installed and enabled on a new installation of Windows Server 2016. It has three Domain Profiles: Domain, Private and Public.
Rules can be applied to each profile for 'Inbound' and 'Outbound' traffic on the network. Rules can be enabled, edited, and copied. Each rule can apply in several situations. Program, port, and predefined rules can be used, or there is a custom option that allows a combination of program, port, or IP address rules to be created.