deepblue/windows-itpro-docs
1
0
Fork 0
mirror of https://github.com/MicrosoftDocs/windows-itpro-docs.git synced 2025-05-12 13:27:23 +00:00
Code Issues Actions 2 Packages Projects Releases Wiki Activity

Update index.md

Browse Source 
Update the overview page with an advice that it is not recommended to disable the Windows Firewall. This information was hidden in the CMD configuration settings so far, hard to find and partially incorrect.
This commit is contained in:
Markus Sarcletti 2024-11-20 18:18:58 +01:00 committed by GitHub
parent 6d94974c02
commit ef5a910b67
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 15 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

15
windows/security/operating-system-security/network-security/windows-firewall/index.md
View File

@ -73,6 +73,18 @@ The *public network* profile is designed with higher security in mind for public
> [!TIP] > [!TIP]
> Use the PowerShell cmdlet `Get-NetConnectionProfile` to retrieve the active network category (`NetworkCategory`). Use the PowerShell cmdlet `Set-NetConnectionProfile` to switch the category between *private* and *public*. > Use the PowerShell cmdlet `Get-NetConnectionProfile` to retrieve the active network category (`NetworkCategory`). Use the PowerShell cmdlet `Set-NetConnectionProfile` to switch the category between *private* and *public*.
## Disable Windows Firewall
Microsoft recommends that you don't disable Windows Firewall because you lose other benefits, such as the ability to use Internet Protocol security (IPsec) connection security rules, network protection from attacks that employ network fingerprinting, Windows Service Hardening, and [boot time filters][BTF]. Non-Microsoft firewall software can programmatically disable only the [rule types][FWRC] of Windows Firewall that need to be disabled for compatibility. You shouldn't disable the firewall yourself for this purpose.
If disabling Windows Firewall is required, don't disable it by stopping the Windows Firewall service (in the Services snap-in, the display name is Windows Defender Firewall and the service name is MpsSvc). Stopping the Windows Firewall service isn't supported by Microsoft and can cause problems, including:
- Start menu can stop working
- Modern applications can fail to install or update
- Activation of Windows via phone fails
- Application or OS incompatibilities that depend on Windows Firewall
The proper method to disable the Windows Firewall is to disable the Windows Firewall Profiles and leave the service running. See [Manage Windows Firewall with the command line][MFWC] for detailed steps.
## Next steps ## Next steps
> [!div class="nextstepaction"] > [!div class="nextstepaction"]
@ -89,3 +101,6 @@ To provide feedback for Windows Firewall, open [**Feedback Hub**][FHUB] (<kbd>WI
[FHUB]: feedback-hub:?tabid=2&newFeedback=true [FHUB]: feedback-hub:?tabid=2&newFeedback=true
[NLA]: /windows/win32/winsock/network-location-awareness-service-provider-nla--2 [NLA]: /windows/win32/winsock/network-location-awareness-service-provider-nla--2
[CSP-1]: /windows/client-management/mdm/policy-csp-networklistmanager [CSP-1]: /windows/client-management/mdm/policy-csp-networklistmanager
[BTF]: /windows/win32/fwp/basic-operation
[MFWC]: /windows/security/operating-system-security/network-security/windows-firewall/configure-with-command-line
[FWRC]: /windows/win32/api/icftypes/ne-icftypes-net_fw_rule_category