Managing Windows Defender Firewall
Windows Defender Firewall is managed by creating rules that are specific to the program or services being hosted and identifying all details surrounding network-facing traffic for the application, services, and drivers used. These firewall policies can be configured and customized per the organization’s granular network, application, and security requirements.
This ultimately boils down to four types of Windows Defender Firewall rules that can be created based on specific application dependencies:
- A Program rule, which requires knowledge of the full path of the application
- A Port rule, which requires knowledge of any/all Transmission Control Protocol (TCP) or User Datagram Protocol (UDP) port connections
- A Predefined rule, which requires knowing only the name of an application already installed on the host computer
- A Custom rule, which requires advanced knowledge of the application regarding the installation path, protocols...