Using Microsoft Windows Firewall

An improved Microsoft Windows Firewall (previously known as Internet Connection Firewall, or ICF) prevents outside requests for data from entering the computer unless specifically allowed by the user.

NOTE: Microsoft Windows Firewall is turned off at the factory.

Configuring Microsoft Windows Firewall

To provide the best security and usability, Windows Firewall provides the ability to add exceptions for applications and services so that they can receive inbound traffic.

To configure Windows Firewall, open the firewall from Control Panel. You can also access the firewall configuration from the Advanced tab in Network Connection properties.

NOTE: After you launch Windows Firewall, Control Panel is available only to the Administrator account.

●General tab—The General tab provides access to the main three configuration options as shown below

◦On (Recommended)

◦Don't allow exceptions

◦Off (Not recommended)

When you select Don't allow exceptions, Windows Firewall blocks all requests to connect to your computer, including those from programs or services on the Exceptions tab. The firewall also blocks file and printer sharing and discovery of network devices.

Using Windows Firewall with no exceptions is useful when connecting to a public network. This setting can help to protect your computer by blocking all attempts to connect to your computer. When you use Windows Firewall with no exceptions, you can still view Web pages, send and receive e-mail, or use an instant messaging program.

●Exceptions tab—Provides the ability to add program and port exceptions to permit certain types of inbound traffic. The exception settings specify the set of computers for which this port/program is open.

You can specify three different modes of access:

◦Any computer (including those on the Internet)

◦My network (subnet) only

◦Custom list

The “Display a notification when Windows Firewall blocks a program” option is selected by default.

You can set a scope for each exception. For home and small office networks, it is recommended that you set the scope only to the local network, where possible. This enables computers on the

Using Microsoft Windows Firewall 65