Question about Windows Server 2016 firewall error.

Question

Hello MS Service Team,

While using Windows Server 2016, I suddenly found that there was no specific port communication with the server.
The main ports we use are 443, 4422, 4489 ports, but we confirmed that 4422, 4489 ports suddenly did not communicate.

We asked the service provider about this matter first, and the engineer replied as follows.

---

"There is a known issue where the Windows Firewall in 2016 behaves erratically.
I would like to advise you toggle the firewall off and on again in the following steps.

• RDP into the UVM appliance and launch gpedit.msc
• Go to Windows Settings > Security Settings > Windows Firewall with Advanced Security > Windows Firewall with Advanced Security
• Click on Windows Firewall Properties on the right panel and toggle all 3 profiles to Off, and then to back On again."

"If the issue in indeed the firewall behaving erratically, it won't be present in the logs.

I haven't taken a look at the logs yet, but we've had a few cases where the firewall behaves oddly. Sometimes it just disables all ports, including RDP, causing a lot of access issues.

Other times, it can be random ports, like just port 3389, or just port 1433, while the rest work fine."

---

• This is a question about the content.

1 : Is the content that I received the answer posted as a known issue?
2 : Can't you find the log inside the server that the firewall is malfunctioning?
3 : If what I received is correct, what should I do to resolve it permanently?

Best Regards,

Answer 1

1) I'd check that windows is patched fully,
2) then check the process is listening. netstat -aon using the PID check Task Manager\Processes tab.
3) Check the firewall profile has not changed (Public/Private/Domain)
4) also check https://www.canyouseeme.org/

--please don't forget to Accept as answer if the reply is helpful--

Answer 2

No known issues I'm aware of. I'd check that windows is patch fully, then I'd start be checking the process is listening.
netstat -aon
then using the PID check Task Manager\Processes tab

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

Are there no known firewall issues for Windows Server?

If not, we are currently using the Windows 2016 version, so I would appreciate it if you could let me know which patch to apply.

Answer 4

Assuming v1607 you could install the latest SSU
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4576750

followed by the latest cumulative update.
https://www.catalog.update.microsoft.com/Search.aspx?q=KB4598243

--please don't forget to Accept as answer if the reply is helpful--

Answer 5

Can it be a solution to firewall issues?