Windows Server 2019-Firewall issues

Question

Hi Team,

Requesting help on the Server-2019 firewall, as it is automatically resetting itself to default within seconds and when I'm creating any rule or allowing any app through it, it is resetting itself to default settings and deletes all the rules which I'm creating.

Note this is happening after the recent updates on the windows server 2019 for Feb2023

Answer 1

Hello there,

Please check the System event in Event Viewer to confirm if there is any related event has been logged.

Can you share the Event ID you are getting when the firewall resets?

As you have made an update, I would suggest uninstalling the update and seeing if everything is normal as before. If this is due to an update we might need to wait for a workaround or Hotfix and you can avoid installing this update until then.

Also, check if the same happens if you are logging in as a different user as this might also be due to profile corruption.

You can use the below tools to understnad and troubleshoot further.

Process Monitor is an advanced monitoring tool for Windows that shows real-time file system, Registry and process/thread activity. You can get the tool from here https://docs.microsoft.com/en-us/sysinternals/downloads/procmon

System Monitor (Sysmon) is a Windows system service and device driver that, once installed on a system, remains resident across system reboots to monitor and log system activity to the Windows event log.You can get the tool from here https://docs.microsoft.com/en-us/sysinternals/downloads/sysmon

Hope this resolves your Query !!

--If the reply is helpful, please Upvote and Accept it as an answer–