Windows Firewall with Advanced Security

Updated: November 18, 2009

Applies To: Windows Server 2008 R2

Use the Windows Firewall with Advanced Security snap-in from the Administrative Tools folder to view the active firewall rules, connection security rules, and Internet Protocol security (IPsec) security associations (SAs).

To use the Windows Firewall with Advanced Security snap-in

  1. Click Start, type wf.msc, and then press ENTER.

  2. In the console tree of the Windows Firewall with Advanced Security snap-in, double-click Monitoring.

    To view the active firewall rules, in the console tree, click Firewall.

    To view the active connection security rules, in the console tree, click Connection Security Rules.

    To view the active main mode or quick mode SAs, in the console tree, double-click Security Associations, and then click Main Mode or Quick Mode.

On a DirectAccess client, if there are active connection security rules whose names begin with DirectAccess Policy, the DirectAccess client has determined that it is not connected to your intranet. If there are active connection security rules but no main mode or quick mode SAs after attempting to access an intranet resource, the DirectAccess client is unable to negotiate IPsec protection with the DirectAccess server.