Overview
This lecture covers configuring and managing the Windows Defender Firewall, including interface navigation, rule creation, and key security options for different network types.
Windows Defender Firewall Basics
- Windows Defender Firewall is built into Windows and is enabled by default for security.
- You can access the firewall through Control Panel or the Windows search option.
- Different security policies can be set for private, public, and domain networks.
- Elevated (administrator) rights are required to disable or change key firewall settings.
Firewall Configuration Options
- You can enable or disable the firewall separately for each network type.
- Optionally block all incoming connections, even those explicitly allowed, for maximum security.
- The firewall can notify you if it blocks a new application.
- Settings can be customized further for individual applications or port numbers.
Managing Firewall Rules
- Windows Defender Firewall allows you to manage inbound and outbound rules via its interface.
- Predefined application rules exist but you can build custom rules for specific needs.
- Advanced settings are accessible through Windows Defender Firewall with Advanced Security.
Creating a Custom Inbound Rule
- Start by right-clicking “Inbound Rules” and selecting “New Rule.”
- Choose rule types: application/program, port (TCP or UDP), predefined, or custom.
- To block web server traffic, create a custom rule blocking inbound TCP traffic on port 80.
- Specify that the rule applies to any IP address and all network profiles (domain, private, public).
- Name the rule, e.g., "block unencrypted web traffic," and save it.
Key Terms & Definitions
- Windows Defender Firewall — Windows' built-in firewall for network traffic control.
- Inbound Rule — A rule that controls incoming network connections.
- Outbound Rule — A rule that controls outgoing network connections.
- TCP Port 80 — Default port for unencrypted HTTP web traffic.
- Private/Public/Domain Network — Network profile types with separate security settings.
- Elevated Rights — Administrator permissions required for certain system changes.
Action Items / Next Steps
- Practice accessing Windows Defender Firewall and exploring its settings.
- Create a custom inbound rule to block or allow a specific port or application.
- Review network profile types and understand when to use each security setting.