Windows Firewall

Windows Firewall is a built-in, host-based, stateful firewall that is included in Windows Vista, Windows Server 2008, Windows XP with Service Pack 2 and later, and Windows Server 2003 with Service Pack 1 and later. Windows Firewall drops incoming traffic that does not correspond to either traffic sent in response to a request of the computer (solicited traffic) or unsolicited traffic that has been specified as allowed (excepted traffic). Windows Firewall helps provide protection from malicious users and programs that rely on unsolicited incoming traffic to attack computers. In Windows Vista and Windows Server 2008, Windows Firewall can also drop outgoing traffic and is configured using the Windows Firewall with Advanced Security snap-in, which integrates rules for both firewall behavior and traffic protection with Internet Protocol security (IPsec).

Featured Resources

	Windows Firewall with Advanced Security overview An overview of the Windows Firewall with Advanced Security (WFAS) and Internet Protocol security (IPsec) features in Windows Server "8" Beta.
	Windows Firewall with Advanced Security Learning Roadmap If you are new to Windows Firewall with Advanced Security, this topic can help you identify what you need to learn to fully understand and use all of the features available in Windows Firewall with Advanced Security.
	Test Lab Guide: Deploy Windows Firewall with Advanced Security to Protect Network Communication to a Domain Controller Download only. Use IPsec in Windows Firewall to protect domain controllers running Windows Server 2008 R2.
	Windows Firewall and IPsec Policy Deployment Step-by-Step Guide This guide illustrates how to deploy Group Policy objects (GPOs) to configure Windows Firewall with Advanced Security in Windows Vista, Windows Server 2008, and Windows 7. A downloadable version is also available.

Windows Server 2008 R2 and Windows 7 Resources

Overview: Windows Firewall with Advanced Security and IPsec
This topic describes the documentation currently available for Windows Firewall with Advanced Security in Windows Vista, Windows Server 2008, Windows 7, and Windows Server 2008 R2.
Product evaluation: What's New in Windows Firewall with Advanced Security
Identifies new Windows Firewall with Advanced Security features introduced in Windows 7 and Windows Server 2008 R2, as well as features that were introduced with Windows Vista and Windows Server 2008.
Getting started: Windows Firewall with Advanced Security Getting Started Guide
Identifies new Windows Firewall with Advanced Security features introduced in Windows 7 and Windows Server 2008 R2, as well as features that were introduced with Windows Vista and Windows Server 2008.
Deployment: Windows Firewall with Advanced Security Deployment Guide
Learn how to deploy a Windows Firewall with Advanced Security design for your organization.
Installed Help: Windows Firewall with Advanced Security
Includes conceptual info, default settings, and configuration procuedures for Windows Firewall in Windows 7 and Windows Server 2008 R2.
Troubleshooting: Windows Firewall with Advanced Security Troubleshooting Guide: Diagnostics and Tools
This topic describes how to troubleshoot Windows Firewall with Advanced Security in Windows 7, Windows Server 2008, and Windows Vista.

Windows Server 2008 and Windows Vista Resources

Product evaluation:The New Windows Firewall in Windows Vista and Windows Server 2008
This January 2006 article by The Cable Guy describes the new features and configuration dialog boxes for the Windows Firewall in Windows Vista and Windows Server 2008.
Getting Started:Introduction to Windows Firewall with Advanced Security
This TechNet article describes how to manage Windows Firewall in Windows Vista through the Windows Firewall with Advanced Security Microsoft Management Control (MMC) snap-in, with Netsh commands, and with Group Policy.
Design:Windows Firewall with Advanced Security Design Guide
Learn how to design Windows Firewall with Advanced Security settings and rules that meet your goals for network security.
Step by step:Step-by-Step Guide: Deploying Windows Firewall Policies
Learn how to deploy Active Directory Group Policy objects (GPOs) to configure Windows Firewall with Advanced Security in Windows Vista and Windows Server 2008.
Troubleshooting:Windows Firewall with Advanced Security Troubleshooting Guide: Diagnostics and Tools
This topic describes how to troubleshoot Windows Firewall with Advanced Security in Windows 7, Windows Server 2008, and Windows Vista.

Windows Server 2003 and Windows XP Resources

Deployment:Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2
Download only. This white paper describes the methods used to deploy Windows Firewall settings in a managed environment so that it is enabled and providing protection, and necessary communications are not impaired.
Deployment:Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2
Download only. This white paper describes how to configure the Windows Firewall INF file to customize the settings of the Windows Firewall either during or after installation.
Operations:Windows Server 2003 Windows Firewall Operations Guide
This Web page contains links to topics about planning, deployment, troubleshooting, operations, and security for Windows Firewall.
Operations:Manually Configuring Windows Firewall in Windows XP Service Pack 2
This February 2004 article by The Cable Guy describes in detail the set of dialog boxes to manually configure Windows Firewall provided with Windows XP Service Pack 2 and Windows Server 2003 Service Pack 1.
Troubleshooting:Troubleshooting Windows Firewall in Microsoft Windows XP Service Pack 2
This article describes how Windows Firewall works, the common problems with using Windows Firewall, and the set of tools used to troubleshoot Windows Firewall issues.
Troubleshooting:Troubleshooting Windows Firewall
This section of the Windows Server 2003 Operations Guide helps you identify and resolve problems that are caused by Windows Firewall, including network access problems, problems running programs, and configuration and management problems.
Technical Reference:Windows Firewall Technical Reference
This section of the Windows Server 2003 Technical Reference contains in-depth technical information about how Windows Firewall works in Windows Server 2003.
Technical Reference:Network Determination Behavior for Network-Related Group Policy Settings
This May 2004 article by The Cable Guy describes how the networking components of Windows XP and Windows Server 2003, including Windows Firewall, determine whether or not the computer is attached to a managed network or another network in order to correctly apply a set of network-related Group Policy settings.

Developer Resources

Windows Firewall and Windows Firewall with Advanced Security API
This section of the Windows Software Development Kit (SDK) describes how to use the Windows Firewall application programming interface (API) so that applications can create, enable, and disable firewall exceptions.

Top of page