Summary

Completed

Advanced Windows Firewall policy provides host segmentation, not simple port filtering. In this module, you learned to understand traffic patterns before creating rules and to scope those rules by stable application, service, protocol, port, address, profile, user, and computer properties. You also learned to configure every firewall profile for expected and failure states, block unmatched inbound traffic while preserving stateful response traffic, and restrict lateral movement through controlled management paths.

You learned to use Internet Protocol security for peer authentication, integrity, confidentiality, and replay protection. For privileged access, you learned to require both authorized user and computer identities and to coordinate secure firewall rules with compatible connection security rules. You also learned to introduce targeted outbound restrictions after discovering dependencies. Finally, you learned to enable logging so you could collect evidence about dropped packets and successful connections.

Further reading

Use the following resources to learn more:

• Windows Firewall overview
• Windows Firewall rules
• Windows Firewall tools
• Configure Windows Firewall
• Manage Windows Firewall with the command line
• Configure Windows Firewall logging
• Windows Server Inside Out (Microsoft Press)