windows-itpro-docs/windows/security/operating-system-security/network-security/windows-firewall/configure-windows-firewall-to-suppress-notifications-when-a-program-is-blocked.md
2023-05-24 16:42:58 -04:00

2.5 KiB
Raw Blame History

title, description, ms.prod, ms.topic, ms.date
title description ms.prod ms.topic ms.date
Configure Windows Defender Firewall with Advanced Security to Suppress Notifications When a Program is Blocked Configure Windows Defender Firewall with Advanced Security to suppress notifications when a program is Blocked windows-client conceptual 09/07/2021

Configure Windows Defender Firewall with Advanced Security to Suppress Notifications When a Program Is Blocked

To configure Windows Defender Firewall with Advanced Security to suppress the display of a notification when it blocks a program that tries to listen for network traffic and to prohibit locally defined rules, use the Windows Defender Firewall with Advanced Security node in the Group Policy Management console.

Caution:  If you choose to disable alerts and prohibit locally defined rules, then you must create firewall rules that allow your users programs to send and receive the required network traffic. If a firewall rule is missing, then the user does not receive any kind of warning, the network traffic is silently blocked, and the program might fail.

We recommend that you don't enable these settings until you've created and tested the required rules.

Administrative credentials

To complete these procedures, you must be a member of the Domain Administrators group, or otherwise be delegated permissions to modify the GPOs.

To configure Windows Defender Firewall to suppress the display of a notification for a blocked program and to ignore locally defined rules

  1. Open the Group Policy Management Console to Windows Defender Firewall with Advanced Security.

  2. In the details pane, in the Overview section, click Windows Defender Firewall Properties.

  3. For each network location type (Domain, Private, Public), perform the following steps.

    1. Click the tab that corresponds to the network location type.

    2. Under Settings, click Customize.

    3. Under Firewall settings, change Display a notification to No.

    4. Under Rule merging, change Apply local firewall rules to No.

    5. Although a connection security rule isn't a firewall setting, you can also use this tab to prohibit locally defined connection security rules if you're planning to deploy IPsec rules as part of a server or domain isolation environment. Under Rule merging, change Apply local connection security rules to No.

    6. Click OK twice.