Skip to main content
ENG

Inbound Traffic Firewall on Windows Servers

Windows Firewall is a built-in security feature that protects the server from unauthorized access and unwanted network traffic. It filters incoming and outgoing traffic by applying rules to block or allow connections based on specified parameters, such as IP addresses, ports, and program types.

How to Use and Configure Windows Firewall​

Accessing Windows Firewall Settings​

  • Open the “Control Panel.”
  • Go to the “System and Security” section.
  • Select Windows Defender Firewall.

Turning Windows Firewall On or Off​

  • In the left menu, select Turn Windows Defender Firewall on or off. You can turn the firewall on or off separately for private and public networks.

Configuring Rules for Apps​

Select “Allow an app or service to pass through Windows Defender Firewall” (Allow an app or service to pass through Windows Defender Firewall)
You’ll see a list of apps and services that are allowed to access the network. You can change their permissions by checking or unchecking boxes for specific networks (private or public). To add a new app, click “Allow another app,” select it from the list, or search for it manually.

Creating Custom Rules​

In the main Windows Defender Firewall window, click “Advanced settings” on the left side of the screen.

In the window that appears, you can create new rules for inbound and outbound connections:

  • Select “Inbound Rules” or “Outbound Rules.”
  • Click “New Rule” in the right-hand menu.
  • Select the rule type (for a program, port, predefined, or custom).
  • Specify conditions, such as the application or port to which the rule will apply.
  • Choose whether to allow or block the connection.
  • Assign the rule to a specific network type (private, public).
  • Enter a name for the rule and save it.

Viewing the Event Log​

In Advanced Settings, you can view the event logs for the firewall, which allows you to track successful or blocked connections. This is useful for diagnosing network connection issues.

Recommendations​

Check the rules regularly—pay close attention to which programs have access to the network. Block unnecessary ports and programs—provide an additional layer of security by limiting network access only to those programs and services that are truly necessary. Use the event log to diagnose problems and ensure the security of your system. This built-in tool provides a basic level of protection, which can be supplemented with other security measures if necessary.

Example of Firewall Configuration for the RDP Protocol on Windows​

In the main Windows Defender Firewall window, click “Advanced settings” on the left side of the screen, click “Inbound Rules,” and filter by “Filter by Group”

To add your device’s IP address for remote access, double-click “Remote Desktop,” go to the “Scope” tab, and under “Remote IP address,” add the IP address or subnet

Save the settings. This will restrict connections to the server via RDP.