Windows Firewall
The Windows Firewall configuration allows you to configure Windows firewall profile settings as well as the desired set of custom rules to be enforced on the device. This configuration can be used to manage non-domain devices, and reduce the risk of network security threats across all systems connecting to the corporate network.
Configure Windows Firewall configuration
Procedure
- Go to Configuration > +Add.
- Select Firewall configuration.
- Click on the Windows icon.
- Enter a name for the configuration.
- Enter a description for the firewall configuration.
-
In the Configuration Setup section, specify the remaining settings as described in the following table.
Setting
What To Do
Profiles Enable Slide the switch to ON to enable the profile.
Type Displays the type of profile.
Example: Domain.
Default Inbound Action Select a option for a default action that should be performed on inbound traffic.
Allow: To allow the traffic
Block: To block the traffic.
Default Outbound Action Select the default action that should be performed on outbound traffic.
Allow: To allow the traffic
Block: To block the traffic.
-
To add Rules, click +Add and configure the following settings:
Setting
What To Do
Rules ON Slide the switch to enable the profile. Rule Name Enter a name that identifies this rule. Description Enter a description that clarifies the purpose of this rule. Direction Select the direction of the traffic to which the rule should be applied:
- In: For inbound traffic
- Out: For outbound traffic
- Both: Both directions.
Action Select the action to be performed
- Allow: To allow the traffic
- Block: To block the traffic.
Profile Select the profile(s) to which the rule should be applied:
- All
- Domain
- Private
- Public
App Type the package family name(PFN) or full path to the app executable. Protocol Select any of the following protocol to which the rule should be applied:
- TCP
- UDP
- ICMP
Local Address Ranges Type the local IPv4/IPv6 address ranges or subnet masks. Local Port Ranges Type comma separated list of remote ports or port ranges.
Example: 20,50,100-120.
Remote Address Ranges Type the remote IPv4/IPv6 address ranges or subnet masks. Remote Port Ranges Type comma separated list of remote ports or port ranges.
Example: 20,50,100-120.
Interface Types Select any of the following interface type options:
- All
- Remote Access
- Wireless
- Lan
- Mobile Broadband
The default option All is applied if no iterface type option is selected.
- Click Next.
-
Select one of the following distribution options:
- All Devices
- No Devices(default)
- Custom
- Click Done.