Over 1 million tech questions and answers.

Egress filtering, Windows Firewall Advanced Security

Q: Egress filtering, Windows Firewall Advanced Security

Windows 7
Windows Firewall Advanced Security

How can I block all outgoing traffic to the internet except one program? I have tried making an outgoing rule to BLOCK all programs, and then an outgoing rule to ALLOW out traffic from the program I need. However, the block rule is took priority and the allow rule was ignored.

I don't want a single outbound connection except one program; no ICMP, DNS, TCP, UDP, MALWARE, nothing. Surely I don't have to individually block every program and port do I?

RELEVANCY SCORE 200
Preferred Solution: Egress filtering, Windows Firewall Advanced Security

I recommend downloading and running Reimage. It's a computer repair tool that has been proven to identify and fix many Windows problems with a high level of success.

I've used it in the past to identify and fix everything from blue screens (BSOD's), ActiveX errors, corrupt files and processes, dll/exe/sys errors, recover lost memory, Windows update problems, defragging, malware removal etc.

You can download it direct from this link http://downloadreimage.com/download.php. (This link will automatically start a download of Reimage that you can save to your computer.)

A: Egress filtering, Windows Firewall Advanced Security

Okay, here's what I did next: Only port I want open for outgoing is 20050

Create outbound rule,
--Custom
--All programs
--Protocol=TCP
--Source Port=Any
--Destination Port=1-20049, 20051-65535 (leaving the 20050 hole)
--Block
--Applies to Domain, Public, and Private profiles

If I am correct, this will allow no TCP traffic outbound except port 20050. I guess I should now create a separate outgoing rule to completely block every other protocol. Does this sound right?

Read other 1 answers
RELEVANCY SCORE 76.8

Hello,
My name is Zoltan and I ran into a problem. I can't use Windows Firewall's advanced features, because MMC (Microsoft Management Center) could not create the snap-in.:
"MMC could not create the snap-in. The snap-in might not have been installed correctly.
Name: Windows Firewall Advanced Security
CLSID: FX: {b05566ac-fe9c-4368-be02-7a4cbb7cbe11}"
I hope somebody will help me.

Read other answers
RELEVANCY SCORE 76.8

I have been unsuccessful in configuring the Windows Firewall with Advanced Security as to play a game Pangya (pangya.ntreev.net). If anyone can help me configure my firewall properly so that I may play this game, please let me know how.

I have tried adding update.exe(game updater)/projectg.exe(game prog) to inbound and outbound connections yet when starting the updater, it cannot access the internet to display HTTP content in the updater's browser window and also cannot connect to the server to attain game updates.
 

Read other answers
RELEVANCY SCORE 76.8

Call it paranoia - I set up the firewall to block all outbound traffic by default, and to allow traffic only if it meets a rule.

I experimented with ping and tracert from the command prompt.

Normally, they both don't work. When I create a rule to allow outbound ICMP traffic, they do work. That's what I expect.

Now I change the rule. Instead of allowing ICMP for any program, I change the program to C:\Windows\System32\PING.EXE , and I leave the ICMP part as it was. I expect that ping still works, but tracert doesn't.

However, neither ping nor tracert works. WHY? To state my question differently: is there a way to allow outbound ICMP for ping, but to disallow it for tracert (or the other way round)?

Read other answers
RELEVANCY SCORE 76

When I try to open the
Advanced Security in Windows Firewall (Control Panel) I get this error message:
MMC Could not Create the snap-it. The
Snap-it might not have been installed Correctly.

The Windows Firewall service is running fine, it says "Started" in the Services list. I cant
run Advanced Security.
 

I Have Panda AntiVirus Ver: 16.0.1 but  don't
have any other firewall
 
Can anyone help me?

Read other answers
RELEVANCY SCORE 74.4

Hi!
In Windows Firewall with Advanced Security on a MS Windows 8.1 Pro. PC in the LAN that is joined to a Windows domain and has an IPv4 address in the private IP range I created
outbound rules that block SMB connections to the Internet hosts (see
http://blog.cylance.com/redirect-to-smb for more info on why you would like to do it).
For that outbound rules I use the following settings:
- Local IP address: Any IP address
- Remote IP address: These IP addresses > Add > Predefined set of computers:
Internet
- Remote ports: UDP/137, UDP/138, TCP/139, TCP/445.
Below you can see how the rules look like in the Group Policy Management Editor (the intention is to apply these rules with a GPO).
The following tests show that the rules work correctly on the test PC:
- When the rules are disabled, the test PC can connect to a shared folder on a Windows PC accessible on a public IPv4 address.
- When the rules are enabled, the test PC cannot connect to the same shared folder on a Windows PC accessible on a public IPv4 address.
In both cases the test PC can connect to shared folders in the LAN.
But, with the rules enabled, we also noticed that the test PC cannot browse other PCs in the LAN through Windows Explorer. Also, "net view" command returns: System error 6118 has occurred. The list of servers for this workgroup
is not currently available
After additional investigation we found out that disabling the rule for port UDP/137 solves the issue.
The question... Read more

Read other answers
RELEVANCY SCORE 72.8

I need help with configuring my Windows Firewall w/ Advanced Security to allow Windows Update to function properly.

I have tried adding an outbound rule for "svchost.exe" and also "wuapp.exe". This has not worked for me.
Does anyone know the proper configuration so that Windows Update functions properly through Windows Firewall w/ Advanced Security?
 

Read other answers
RELEVANCY SCORE 72.8

I'm trying to turn on my firewall and I get the the Error " Windows can't change Some of your settings. Error Code 0x80070422" When I try to go to advanced settings I gfet the error above "Windows Firewall with advanced Security snap-in failed to load. Error
Code 0x6D9". I'm thinking that error in settings is why the firwall won't turn on. How can I get to the settings and check them?

A:Windows Firewall with advanced Security snap-in failed to load. Error Code 0x6D9

You're welcome, CardGunner. See if this update is listed in Installed Updates 
 KB976902 - Description of the Windows 7 and Windows Server 2008 R2 installation software feature update
 I suspect that is the update that may have restored the firewall.

Read other 21 answers
RELEVANCY SCORE 68.4

Is built-in firewall in Vista Home Premium enough? I am told there is no way to configure outbound with Vista Home Premium. Should I use ZONE ALARM? Does ZONE ALARM work with AntiVir Classic?

A:Vista Firewall with Advanced Security

Hi. . .

I always use the Windows Firewall and find it to be fine. True about the outbound being virtually non-existent. You can try to configure - I never have -
START | type WFF.msc into the start search box and hit enter

I would not advise the use of Zone Alarm. I have seen too many system crashes with it mentioned. Windows Firewall along with Windows Defender (spyware) and the anti-virus of your choice should do it for you. I have always thought that if there is something in your system sending info out that should not be - the point of having a firewall then becomes moot - as it was the inbound firewall or the user that let whatever in into the system in the first place. System crash info and performance related data does go out to Microsoft and probably the manufacturer of your system as well - but no personal data.

Regards. . .

jcgriff2

.

Read other 3 answers
RELEVANCY SCORE 68.4

Florida Dept. of Law Enforcement has sent out some new requirements for local municipalities one of which requires an encrypted tunnel for transmission of information between laptops and our local server. 
They have tentatively approved the use of the Windows Firewall Advanced Security Tunnel but require that it meet FIPS standards and that I be able to send them a certificate stating which type of FIPS standards it meets.
Is that information available anywhere?
Thanks,
Clyde

Read other answers
RELEVANCY SCORE 68

unlcear how to add
http://*.update.microsoft.com
https://*.update.microsoft.com
http://download.windowsupdate.com
once in wizard

A:Unclear how to add this in "Windows Firewall with Advanced Security"

i don't think you can do that sort of thing with windows firewall - it mainly controls programs, not individual sites.

what are you trying to achieve actually? are you trying to block updates or something?

Read other 1 answers
RELEVANCY SCORE 64

I am ready to do a fresh reinstall of Windows 7 (which I really don't want to do)... I've spent most of the past week trying to eliminate 1) Win 7 Security 2012 malware, 2) Google pages were being redirected, 3) all desktop icons were missing, and 4) Windows Firewall won't run. I used Malwarebytes, SuperAntiSpyware, TDSSKiller, and a registry repair.

I first got the Win 7 Security 2012 issue. I thought I fixed it with Malwarebytes and TDSSKiller... but then my Google pages would redirect. I "fixed" that but then my desktop icons were gone. I manually changed some registry entries and they reappeared. Now... I noticed Windows Firewall isn't working (and Base Filtering Engine isn't loaded). I tried using several System Restore points but it couldn't find a file (not sure which one) and didn't run.

Here is my DDS Log:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514
Run by Carter at 16:18:21 on 2011-12-07
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.4094.2938 [GMT -5:00]
.
AV: AntiVir Desktop *Enabled/Updated* {090F9C29-64CE-6C6F-379C-5901B49A85B7}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: AntiVir Desktop *Enabled/Updated* {B26E7DCD-42F4-63E1-0D2C-6273CF1DCF0A}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k ... Read more

A:Windows Firewall and Base Filtering Engine won't load

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/431207 <<< CLICK THIS LINK If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lo... Read more

Read other 2 answers
RELEVANCY SCORE 64

My operating system is Windows 7 Home Premium 32 bit, it was upgraded from vista. my computer model is the HP Pavilion Slimline s3300f
this first happened about a week after I upgraded to 7 from vista. the high cpu usage usually happens at startup and for some reason also makes it so that it takes a long time for my browser to start up also, I've also noticed that this also seems to happen randomly though that is uncommon. Another instance of this happening is when the internet gets disconnected. Usually I wait until the high cpu usage goes away away on its own, usually 20 minutes to an hour but that had become frustrating, so I'm wondering if anyone else has had this problem and what I can do.
heres a screen shot of what I observe as high cpu usage

A:At startup windows firewall of base filtering enginer uses up 50%cpu

Welcome
With those problems, it sounds like you may have actually upgraded than do a clean intall. You can and should do a clean install with an upgrade version CD.
Clean Install with a Upgrade Windows 7 Version[2]=General Tips

Read other 2 answers
RELEVANCY SCORE 63.6

My computer recently started having problems, concerning firewalls and the Base Filtering Engine.
 
I cannot start the Base Filtering Engine due to Error 5 and have scoured the internet for ways to fix this.
 
Windows Firewall and Windows Defender also do not start at all, due to them needing the Base Filtering Engine to work. 
 
So far, I have not found anything that helped in starting the Base Filtering Engine.
 
I mainly need this fixed, because I thought it was just a simple error with my Avast Premier software, so I uninstalled it with the intentions of re-installing later. 
 
However, Avast needs the Base Filtering Enginein order to install, which has left me in a vulnerable position of my own doing.
 
I have ran MalwareBytes, AdwCleaner and FarBar Recovery Scan Tool, all of which have yielded no results.
 
I use Windows 10 Pro
I have 16GB of RAM
I have a Intel i5-4690k which runs at 3.50 GHZ

A:Cannot Start Base Filtering Engine and as a result, Windows Firewall

Hi to BleepingComputer
 
Try this please
 
Download Windows Repair (All-in-One) Portable (use the Direct Download button)
extract the tweaking.com_windows_repair_aio.zip to c:\Windows\TEMP the zip will extract to a folder called Tweaking.com - Windows Repair
execute the file Repair_Windows.exe from the Tweaking.com - Windows Repair folder
click on the tab Step 5: Backup and on the buttons:
Backup to create a Registry Backup
Create to create a System Restore Point

click on the tab Start Repairs, next click the Open Repairs button to access the following screen:
click the box All Repairs to uncheck all the box's
check only the following box's:
01 - Reset Registry Permissions
02 - Reset File Permissions
02.1 - File Permissions C:\
03 - Reset Service Permissions
26 - Restore Important Windows Services
27 - Set Windows Services to Default Startup

check the box Restart/Shutdown System When Finished > Restart System
click the Start Repairs button
 

Read other 3 answers
RELEVANCY SCORE 63.6

Hello,
Amongst other problems, I am having issues trying to get Windows Firewall to work.
 
I am running Windows 7 64-bit Service Pack 1 with the latest version of Avast Free Antivirus and I am logged in as an Admin.
 
Action Center reports that Windows Firewall is turned off or set-up incorrectly. When I try to turn it on it says
"Action Center can't turn on Windows Firewall.
Turn on Windows Firewall manually"
When I click on the link (the underscored text), it brings me to the Windows Firewall page where it is red and says
"Update your Firewall settings
Windows Firewall is not using the recommended settings to protect your computer."
When I click on "Use recommended settings" or try to change any of the Firewall settings, it gives me this error
"Windows Firewall can't change some of your settings.
Error code 0x8007042c"
 
In Event Viewer, there is this error:
"The Windows Firewall service depends on the Base Filtering Engine service which failed to start because of the following error:
The service cannot be started, either because it is disabled or because it has no enabled devices associated with it."
According to Services, BFE is disabled and when trying to change it's Startup type, it gives me this error:
"Access is denied."
 
In msconfig, I have checked Base Filtering Engine and restarted the computer multiple times but it always remains unchecked.
 
I'm not really sure what else to do. It could have something to do with me messing around in msc... Read more

A:Windows Firewall Won't Work and Base Filtering Engine Won't Start

Hi,
 
Try this:
 
Download Windows Repair (All-in-One) Portable
extract the tweaking.com_windows_repair_aio.zip to c:\Windows\TEMP the zip will extract to a folder called Tweaking.com - Windows Repair
execute the file Repair_Windows.exe from the Tweaking.com - Windows Repair folder, accept the Security warning and the EULA
click the button Jump To Repairs
click the Open Repairs button to access the following screen:
click the box All Repairs to uncheck all the box's
check only the following box's:
01 - Reset Registry Permissions
02 - Reset File Permissions
03 - Reset Service Permissions
25 - Restore Important Windows Services
26 - Set Windows Services to Default Startup

check the box Restart/Shutdown System When Finished > Restart System
click the Start Repairs button
 

Read other 15 answers
RELEVANCY SCORE 63.6

My computer recently started having problems, concerning firewalls and the Base Filtering Engine.
 
I cannot start the Base Filtering Engine due to Error 5 and have scoured the internet for ways to fix this.
 
Windows Firewall and Windows Defender also do not start at all, due to them needing the Base Filtering Engine to work. 
 
So far, I have not found anything that helped in starting the Base Filtering Engine.
 
I mainly need this fixed, because I thought it was just a simple error with my Avast Premier software, so I uninstalled it with the intentions of re-installing later. 
 
However, Avast needs the Base Filtering Enginein order to install, which has left me in a vulnerable position of my own doing.
 
I have ran MalwareBytes, AdwCleaner and FarBar Recovery Scan Tool, all of which have yielded no results.
 
I use Windows 10 Pro
I have 16GB of RAM
I have a Intel i5-4690k which runs at 3.50 GHZ

A:Cannot Start Base Filtering Engine and as a result, Windows Firewall

Hi to BleepingComputer
 
Try this please
 
Download Windows Repair (All-in-One) Portable (use the Direct Download button)
extract the tweaking.com_windows_repair_aio.zip to c:\Windows\TEMP the zip will extract to a folder called Tweaking.com - Windows Repair
execute the file Repair_Windows.exe from the Tweaking.com - Windows Repair folder
click on the tab Step 5: Backup and on the buttons:
Backup to create a Registry Backup
Create to create a System Restore Point

click on the tab Start Repairs, next click the Open Repairs button to access the following screen:
click the box All Repairs to uncheck all the box's
check only the following box's:
01 - Reset Registry Permissions
02 - Reset File Permissions
02.1 - File Permissions C:\
03 - Reset Service Permissions
26 - Restore Important Windows Services
27 - Set Windows Services to Default Startup

check the box Restart/Shutdown System When Finished > Restart System
click the Start Repairs button
 

Read other 1 answers
RELEVANCY SCORE 63.2

Hello,
  I'm working with Bitdefender Total Security 2019.  I've noticed that their firewall is enabled when my Dell Latitude E6410 connects to my wireless network approximately 1.5 minutes after Windows 7 Professional starts.  In an e-mail, the
company told me that their firewall is enabled after the specified interval because of Windows Base Filtering Engine (BFE).  They also described the issue this way, BFE controls
the operation of the Windows Filtering Platform.  This is a network traffic processing platform that allows software to ?hook? into Windows networking stack and perform such functions as firewall, traffic shaping, filtering, etc. When this service loads
with a delay, it also triggers a delay of the Bitdefender firewall driver, which translates into the notification "Firewall status changed". The driver is coded to wait until BFE is completely loaded, otherwise it can't work.
     I've worked w/Checkpoint's ZoneAlarm Firewall (free edition) and it is enabled right when Windows starts, there is no delay.  Can
I modify BFE to enable Bitdefender Firewall to initiate at Windows startup?

Any and all feedback would be appreciated!

Thank you

Read other answers
RELEVANCY SCORE 63.2

So at least have everybody in this thread probably has an advanced firewall. The kind that gives you constant pop-ups with port, direction, and I.P. details, it's not a bad thing and that only means you are being informed and protected but I still want to know something. Is there something out there like a general filter of all known bad IPs that you can automatically load into your firewall so that every program that is allowed internet access does not accept anything from those IP addresses. You know, something like turning your firewall into a good and effective Peer Guardian.

A:Advanced Firewalls And Ip Filtering

I suppose it's possible if you're willing to pay for it. But internet security is in a constant state of change so even if someone is offering an all in one solution, it will probably be obsolete tomorrow. Users need to be vigilant about internet security but it seems like too much trouble for a lot of people...until they get infected.

Read other 10 answers
RELEVANCY SCORE 62.8

Hi,

I have tried starting BFE and Windows Firewall, but cant get anything to work.

I came across this thread:Base Filtering Engine could not be started. System Error 5 has occured

Everything is the same up until the commands : REG QUERY HKU
REG QUERY HKU\S-1-5-20

I get :
C:\windows\system32>REG QUERY HKU

HKEY_USERS\.DEFAULT
HKEY_USERS\S-1-5-19
HKEY_USERS\S-1-5-20
HKEY_USERS\S-1-5-21-2352804387-1745691877-3320543892-1000
HKEY_USERS\S-1-5-21-2352804387-1745691877-3320543892-1000_Classes
HKEY_USERS\S-1-5-18

A:BFE(Base filtering Engine) Error 5 Access Denied + Windows Firewall

Hi jc and welcome to the Forum
I found this after Googling your problem, you might find it useful, though I would emphasize the importance of backing up your registry before editing it!
Windows 7 Base Filtering Engine is not running - Microsoft Community

Read other 3 answers
RELEVANCY SCORE 62

Two days ago, AVG popup showed infection in C:\windows\system32\consrv.dll as trojan horse generic_r.JU. I moved it to the virus vault.

I recently connected my xbox360 to the network and have been streaming videos from this computer.

I compared a previous exported services list to the current list and found these services missing:

Base Filtering Engine (BFE)
IP Helper
Security Center
Windows Defender
Windows Firewall

The HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\ keys for MpsSvc and BFE are missing, however the SharedAccess key is still present.

I try to go to Windows Firewall through the Control Panel, but this is what happens:

TSG SysInfo said:

Tech Support Guy System Info Utility version 1.0.0.2
OS Version: Microsoft Windows 7 Home Premium, Service Pack 1, 64 bit
Processor: Pentium(R) Dual-Core CPU T4300 @ 2.10GHz, Intel64 Family 6 Model 23 Stepping 10
Processor Count: 2
RAM: 3999 Mb
Graphics Card: Mobile Intel(R) 4 Series Express Chipset Family, 1807 Mb
Hard Drives: C: Total - 135874 MB, Free - 60281 MB; D: Total - 12153 MB, Free - 2039 MB; Z: Total - 90243 MB, Free - 8735 MB;
Motherboard: Wistron, 3612
Antivirus: Lavasoft Ad-Watch Live! Anti-Virus, Disabled <=****Why does this say "Disabled"?****Click to expand...


DDS said:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_29
Run by admin at 5:09:36 on 2011-12-05
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.3999.1530 [G... Read more

A:Base Filtering Engine & Windows Firewall Services disappeared; consrv.dll (trojan)

solved w/ fresh install!
 

Read other 1 answers
RELEVANCY SCORE 62

Hey everybody,

I am having serious problems with my laptop. Here are the specs: Dell N5010, Windows 7 Home Premium SP1, Intel(R) Core(TM) i5 CPU, M [email protected] 2.66GHZ, 6.00Gb of RAM, 64-bit operating system. I have run everything as an administrator, to no avail.

After a week without being able to charge my laptop (I was without a cable), I charged it to find that I could not connect to the internet, or that I was only given "Limited Access," i.e., none. I opened the 'Network and Sharing Center' to find that, under "View your basic network information and set up connections" heading, the text reads, "Unknown - The dependency service or group failed to start."

Going to the status of the Wireless Network Connection and trying to diagnose the problem gives me this error: "The Diagnostics Policy Service is not running."

In Services, under Diagnostics Policy Service, as well as the Base Filtering Engine, I receive the following error(s): "Windows could not start the x service on Local Computer. Error 5: Access is denied. (The variable is either Diagnostics Policy Service, Base Filtering Engine, etc.)

Also in Services, under Windows Firewall, I receive this error: "Windows could not start the x service on Local Computer. Error 1068: The dependency service or group failed to start.

Here's several of the things I have tried from perusing the other threads here, none of which have worked. Svc /SCANNOW has foun... Read more

A:Diagnostics Policy Service, Windows Firewall, & Base Filtering Engine will not start

Did you go to the dependencies tab and see what dependencies depend on these services?

Read other 2 answers
RELEVANCY SCORE 60.4

So I was tasked with Removing our GPO that turned off Windows firewall and prevented it from being able to be turned on. My Managers want it so the user can turn it on if needed. But when I disable the GPO it Auto turns on the firewall which would be bad
as the rules aren't in place to allow everything we do.

So question is there anyway to turn off Windows Firewall but allow a user to turn it on.  I have tried several different settings in GPO but all of them either gray out the turn on button or they turn on the Firewall automatically. 

Read other answers
RELEVANCY SCORE 60.4

Not sure if anyone had seen this...but there is a pretty powerful Firewall built into Windows. It filters both inbound & outbound traffic...comparible to any commercial firewall out there. You have to be pretty specific with your rule setting...

Don't go to Control panel ...instead in "run/search" type: wf.msc

Here's what it looks like:

A:Windows FireWall Advanced

You can also go to Control Panel-Administrative Tools-Windows Firewall With Advanced Security or go to Control Panel-Windows Firewall-Advanced Settings.

Read other 8 answers
RELEVANCY SCORE 59.6

Hi All,

I'm looking for some help with some Windows Firewall advanced settings. I've already downloaded Vista Firewall Control to simplify the firewall setup, and its really doing what I want (asking me for any inbound and outbound connections), but the free version doesn't allow control over general network access (at least not that I can find so far). I need to get my Win7 computer to recognize my WinXP in the network screen, something that I can't seem to do without making some special rules in the firewall settings.

I've already turned off "password protected sharing" and set the "send password" option in gpedit.msc to enabled... settings which worked well in a previous install (AVG removed my access to folder options so I had to reinstall), but I can't seem to get to work now that I've installed VFC. So I guess I need to know what "rules" I need to set up to retain the strict control over inbound/outbound connections that I've got with VFC, but still allow easy network access between the 2-3 computers on my router.

Any other info you need, please let me know,
Thanks,
Greg

A:Windows Firewall Advanced Setup

if you do some searching, in this sub forum actually... you would have noticed a few posts that discuss these topics and answer some if not all your questions before posting

Read other 1 answers
RELEVANCY SCORE 59.6

Hi Folks,
I'm browsing through my windows firewall settings and I'd like to disable everything that's not required for proper operation.

It is my opinion that the more stuff that is disabled in my computer system, the more secure it is.. Anyone have a different opinion?
I already went through Services.msc and disabled stupid things like telephony and remote desktop connection and things that I'll never use.

Inside the Windows Firewall advanced settings, can I disable all the windows media player sharing service stuff? I use windows media player to play music and movies but I certainly don't do any sharing with it.

What about wifi direct scan and wifi driect network discovery... My desktop pc is hardwired (cat5).. I don't need any of that stuff right?

Sonic Wall mobile content??? Huh?

What about Play To Streaming Server ??

More to follow!T

thanks

A:Windows Firewall Advanced Settings

Originally Posted by murby


It is my opinion that the more stuff that is disabled in my computer system, the more secure it is.. Anyone have a different opinion?



Not necessarily. For example, it wouldn't be more secure if you blocked software updates that fixed security vulnerabilities, or blocked svchost from connecting to Certificate Authorities to check for revoked SSL/TLS certificates, blocked Smartscreen filter connections, etc.






I'm browsing through my windows firewall settings and I'd like to disable everything that's not required for proper operation.



I'd leave all the Core Networking and Network Discovery rules there. If you look at the Network Discovery rules, they're only enabled on Private Networks by default anyway, the rules are disabled in the firewall rules for Public networks (grey tick, not green. You can also double-check the settings HERE). And if you have file and printer sharing switched off, your private network is treated as a 'Public' network anyway.

In addition, even though I don't have Wi-Fi on my main machine, I left the Wi-Fi Direct rules there as well, mainly so that if I import the rules into a laptop the rules are already set up. I was planning on trying out Miracast at some point with a laptop, but never got around to it, so if you don't plan on using a Wi-Fi direct printer/scanner/screen/etc., then I can't think off the top of my head why you'd need those rules. Althoug... Read more

Read other 4 answers
RELEVANCY SCORE 59.2

February 10, 2017

Russian anti-virus company Doctor Web has updated Dr.Web Net filtering Service (11.1.9.02090) in a number of Dr.Web products. The update delivers a fix for an identified problem.

Specifically, it addresses a connectivity issue involving some remote banking applications and Outlook Express.

Please, note that if the option to scan secure traffic is enabled, SSL 2.0 connections will still be blocked. If you need to use this protocol, add the corresponding application onto SpIDer Gate's exception list.

The update will be performed automatically; however, a system reboot will be required.
 

A:Dr.Web Net filtering Service updated in Dr.Web 11.0 for Windows, Dr.Web Enterprise Security Suite 10

Nice share, qashashng rafti zire tokhma doci
 

Read other 1 answers
RELEVANCY SCORE 58.8

I just realized the firewall software is installed on Windows 7 is a vast improvement on the old XP day's! I was looking to use comdo or zone alarm however it looks like everything I would use is included in this built in firewall.

However I would like to know if anyone can tell me a way to have the firewall software PROMPT me each time any application tries to connect outside of my PC?

So I can set a rule and say yes allow this or deny this?

A:WIndows Advanced Firewall Can It inform me of outgoing?

I heard of this, Windows 7 firewall control. I'm not sure whether you can do this without using a 3rd-party program. May be useful for promting you each time a (new) application wants to connect to the internet.

Windows 7 Firewall Control - Free software downloads and software reviews - CNET Download.com

Read other 1 answers
RELEVANCY SCORE 57.6

Hi All
Im Using HP Laptop, Running Windows Vista Home Premium in Xp i used to see the Logging & ICMP Setting in Windows Firewall Settings/ Advanced Tab, but in Vista i couldn't find the Logging or ICMP setting in Windows Firewall Settings/ Advanced Tab, there is only Restore Defaults,
so how to show the Logging and ICMP Setting on Windows Firewall Settings/ Advanced Tab ? or where should i find them ? coz i want to change setting for one program and confirm my IP address , any help plz ?
Many thanks ...

A:can't see Logging and ICMP Setting on Windows Firewall Settings/ Advanced, Help Plz

Hi,

Look here to see if this answers your question?

Allow Pings (ICMP Echo Request) Through Your Windows Vista Firewall - How-To Geek

Read other 26 answers
RELEVANCY SCORE 57.2

What would be an ideal hardware firewall for a small business that needs to limit browsing to about 5 websites plus email access? Any suggestions would be appreciated. Thanks!
 

A:Firewall + filtering hardware

Does it need to filter email? Don't know about an all in one solution. The one I have used is SonicWall and it does have a web filter you can subscribe to and also set up an access list. You can get a POP proxy for email if you have a mail server in house.

Just looked at a clients SonicWall and you can configure an email virus proxy for internal client regardless whether or not you have a mail server in house.
 

Read other 2 answers
RELEVANCY SCORE 57.2

Hi, I need help because i have problem with function URLFiltering of me firewall Asus RX3041.

Under Firefox in version 3, this URL filter function works correctly, but not under the Internet Explorer in version 8. In Firefox are selected webpages blocked, but not under IE8. What does it mean? Thanks for help

Read other answers
RELEVANCY SCORE 56.4

The base filtering engine, and firewall won't start. I get error code:5 Access is denied from the base filtering engine, and Windows Firewall can't change some of your settings Error Code: 0x80070424. Any help with this problem would be greatly appreciated.
Cheers,
Ken

A:Firewall and Base Filtering Engine

Hi, most likely need to add MpsSvc to object names in the permissions field, lets be sure what's going on. Go to start , search and type:- cmd right click on the returned cmd .exe and select "run as administrator" at the prompt copy paste:-


Code:
echo > 0 & sc queryex BFE >> 0 & sc queryex MpsSvc >> 0 & echo >> 0 & notepad 0
press enter

Please post the notepad outcome here.

Read other 13 answers
RELEVANCY SCORE 56.4

About two hours ago, my computer lost internet connection and was searching for network address. This happens a lot, and so far I thought it is normal. But when I right-clicked the icon for "repair", restarted the connection search. But instead of simply reconnecting I noticed a Windows Security Alert popup that said my firewall was disabled. Also my computer went very slow at the time, but is now normal speed and connected. But the popup quickly disappeared as soon as it was shown. I immediatly checked the settings, but it showed firewall was still on. I still have popup saying I turned off automatic updates (I did do this), but it is no longer saying my firewall is off. What could have cause this weird thing to happen? Since then there has been no sign or sympton of infection.

A:Windows Security Alert pop "Firewall disabled" but firewall is still on

Please download Malwarebytes Anti-Malware and save it to your desktop.alternate download link 1alternate download link 2Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself.Press the OK button to close that box and continue.If you encounter any problems while downloading the updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the Start Scan button. The scan will begin and "Scan in progress" will show at the top. It may take some time to complete so please be patient.When the scan is finished, a message box will say "The scan completed successfully. Click 'Show Results' to display all objects found".Click OK to close the message box and continue with the removal process.Back at the main Scanner screen:Click on the Show Results button to see a list ... Read more

Read other 5 answers
RELEVANCY SCORE 56.4

hi there,

I have both Eset Smart Security Personal Firewall and Windows Firewall running... which should i disable to avoid conflicts?

thanks.

Sincerely,

Mon

A:Eset Smart Security Firewall or Windows Firewall?

I believe that the Eset firewall has outbound protection and if that is the case, I would disable the Windows one as it does not have outbound protection.

Read other 5 answers
RELEVANCY SCORE 56

Hi everyone,

i am looking for a small business or advanced home use router or firewall that has the ability to schedule the URL filtering.

ex: i want to block youtube at certain time of the days within the week, instead of blocking anytime always.

So far, i have found some models, but they all just let me block the URL at all times.

If anyone happens to work with or know any brand or model, please kindly advise. Thanks !!!
 

A:Recommendation Needed for router/firewall with URL filtering

Netgear Routers.

https://kb.netgear.com/20483/How-do...vices-on-my-NETGEAR-router-using-Smart-Wizard
 

Read other 2 answers
RELEVANCY SCORE 56

Hi,
I have been asked by a small educational institution to implement web filtering for about 10 student computers. Their goal is for the students to have access to specific web sites that are on a school whitelist but not show any pics, videos, java content, etc. Basically just plain text. After googling around it seems that MS ISA server is an option (expensive but user friendly) or Squid (free but not so user friendly). I need it to have some basic features like a log of who accesses it and when, timed access, etc.
Any suggestions out there of what I can use to accomplish this? Are Squid and ISA the only choices? I also saw something called "Firestarter" http://firestarter.sourceforge.net/. Has anyone had experience with this?

Your help is appreciated.
 

Read other answers
RELEVANCY SCORE 55.2

Hello everyone this is my fist time here.Does now to get rid of windows advanced seurity center?

A:windows advanced security center how to i get rid of it?

An infection of this nature requires expert attention, which you will receive in the Malware Removal Area......
 Please follow the instructions in the Preparation Guide  starting at Step #6.
 
When you have created the necessary logs, start a new topic  HERE 
 
..... and post the required logs to your new topic .  (You will also find this link at Step 7 in the Preparation Guide).   The Malware Response Team Experts from the Virus, Trojan, Spyware, and Malware Removal Logs forum will attend to your topic from thereon.
(Windows 8.1 Users will not be able to create DDS Logs)=> Continue if you cannot finish any step -
         Please Use Copy / Paste for your responses, and Do Not Attach them unless your helper requests this.
 After doing this, please reply back in this thread with a link to the new topic so we can close this one.
Above All...DO NOT add any replies to your topic....Please be patient. It may take a while to get a response because the Malware Removal Team members are very busy working logs posted before yours. They are volunteers who will help you out as soon as possible. Once you have made your post and are waiting, please DO NOT "bump" your post or make another reply until it has been responded to by a member of the Malware Removal Team. Generally the staff checks the forum for postings that have 0 replies as this makes it easier for them to identify those who have not b... Read more

Read other 1 answers
RELEVANCY SCORE 55.2

These three services (Windows Firewall, Diagnostic Policy Service, and Base Filtering Engine) running in a single svchost, frequently hog nearly 50% of my CPU (Intel i5 third-gen). How can I improve this? My fan is nearly constantly running. Is there any way I can make these services a little bit less aggressive or something to improve performance of my computer? Thanks!

Andrew

A:CPU Hogging: Firewall, Diagnostic Policy, & Base Filtering

Any ideas on how I can tone these down? I don't want them to be so aggressively hogging resources on my computer.

Read other 7 answers
RELEVANCY SCORE 54.8

Can someone help me get this virus off my windows 8 laptop please? I can not access the internet or any of my files. It always has a pop up say "firewall has blocked a program from accessing the internet" someone please help me!

A:Windows Advanced Security Center Virus?

Don't know if this will help much but it's worth a try.Try to get into the Task Manager and go in to start up programs.See if there is anything that catches your eye and disable it and restart and see if that helps.Won't get rid of the virus but you might be able to work from there.

Read other 16 answers
RELEVANCY SCORE 54.8

Hi, have a Windows Vista computer infected with the Windows Advanced Security Center virus. I am unable to open or download any files. It will not let me open or run any files even in Safe Mode. Please let me know what I should do. Thanks

Steve

A:Windows Advanced Security Center Virus

Hello and Welcome to TSF.

If you haven't already, please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

Restart your computer.

As soon as the BIOS is loaded begin tapping the F8 key until Advanced Boot Options appears.

Do you see the Repair your computer menu option? If not...

Do you have a VISTA installation CD, or can you borrow one?

------------------------------------------------------

Read other 19 answers
RELEVANCY SCORE 54.8

Repeating popups with urgent messages that my computer is infected, directs me to click "Prevent attack" and immediately shuts down both IE & FF. It did get progressively worse over about six hours. Before internet blocking became immediate I was able to run DSS log and have a log file and an attach file. I should have saved the DSS program but clicked "run" instead.
I am communicating from a different computer. I have backed up my critical data but no programs or .exe files.
I appreciate ANY help!

A:"Windows Advanced Security Center" closes IE & FF

Boot the PC into safemode with networkingDownloadhttp://www.techspot.com/downloads/4716-malwarebytes-anti-malware.htmlInstall,update and run a full scan Click on SHOW results.Select all infections and remove itReboot the PC and scan MBAM once in regular mode until you get a clean logDownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive)DownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results here

Read other 3 answers
RELEVANCY SCORE 54.8

I'm trying to remove Windows Advanced Security Center from a friend's laptop running Vista. I've tried various removal methods, but they all involve downloading apps to the infected computer. I can't download anything, because WASC won't let me open a browser. I get the fake message "Firewall has blocked a program from accessing the Internet."
 
The malware works the same in Safe Mode as it does in regular mode. I've installed rKill by using a thumb drive, but WASC will not let it run, even when rKill has the fake name "iExplore". It looks as if the WASC developer(s?) keep up with all the workarounds and ensure they're prevented.
 
I've also used a registration number I found on one of the sites, to "register" the WASC app, but there's no Enter button on the registration form, and nothing happens.
 
What's the latest fix method for WASC?

A:Infected with Windows Advanced Security Center

Before we can do anything we must first end the processes that belong to Security Center so that it does not interfere with the cleaning procedure. To do this, please download RKill to your desktop from the following link.RKill Download Link - (Download page will open in a new tab or browser window.)
When at the download page, click on the Download Now button labeled iExplore.exe download link. When you are prompted where to save it, please save it on your desktop.
 
Once it is downloaded, double-click on the iExplore.exe icon in order to automatically attempt to stop any processes associated with Security Center and other Rogue programs. Please be patient while the program looks for various malware programs and ends them. When it has finished, the black window will automatically close and you can continue with the next step. If you get a message that RKill is an infection, do not be concerned. This message is just a fake warning given by Security Center when it terminates programs that may potentially remove it. If you run into these infections warnings that close RKill, a trick is to leave the warning on the screen and then run RKill again. By not closing the warning, this typically will allow you to bypass the malware trying to protect itself so that RKill can terminate Security Center . So, please try running RKill until the malware is no longer running. You will then be able to proceed with the rest of the guide. Do not reboot your computer after running RKill as... Read more

Read other 14 answers
RELEVANCY SCORE 54.8

My OS is Windows7x64 IE9.Unfortunately, while browsing my system was infected by this rogue virus. The only security software that was running at the time was Microsoft Security Essentials and the virus totally disabled it and all fireworks started including the fake alerts, etc. I found the removal guide at this forum and wish to express my thanks to all involved with this solution. However, I was not able to follow all the outlined procedures. For instance, I could not get RKill to download. I went to internet options and made sure Proxy Server was unchecked as suggested. I then ran Malwarebytes and it detected 3 items associated with this virus and removed them. I re-started and the all seemed to be okay. I then went and uninstalled Microsoft Security Essentials and re-installed (until I can get a product such as Malwarebytes Pro Edition). I checked Action Center and even though I re-installed MSE it did not show up under the Security section when clicked-on. I checked it several times and strangely it would show up and then again not??I was wondering if this could mean that some part of the virus is still active? I also noticed that my taskbar is not showing the pennant(which lets you know if any issues have been detected) in the right corner alongside the hidden icons. I was hoping that someone more technologically savvy than I would have an answer and/or solution. Help, please!Edit: Moved topic from AntiVirus, Firewall and Privacy Products and Protection Methods to ... Read more

Read other answers
RELEVANCY SCORE 54.4

I was infected with the Vista Security 2012 virus. I have since run Malware, Spybot, CCleaner, Microsoft Security Essentials, Microsoft Fix It. It has disabled my firewall and windows security and network sharing. I am unable to turn them on. I have tried to do the windows repair with my disk, that did not help, sfc/scannow has not helped. I do not have a system restore point to go back to either, it was erased. Im stuck. Help.

A:Windows Security will not start/firewall/network sharing due to Vista Security 2012 virus

Welcome aboard Please download Farbar Service Scanner and run it on the computer with the issue.Press "Scan".It will create a log (FSS.txt) in the same directory the tool is run.Please copy and paste the log to your reply.

Read other 9 answers
RELEVANCY SCORE 54

Windows 7 Home Edition has been infected with Windows Advanced Security Center. I was referred to this Experts area because this infection prevents me from downloading anything (like Malwarebytes and DDS), opening any browser, running iexplore.exe, etc. I literally cannot do anything that I've been advised to do, even in Safe Mode! Please help!

A:Newbie infected with Windows Advanced Security Center.

hit the f8 key to bring up the advanced boot menu (boot with command prompt)
 
at the prompt type:
C:\windows\system32\rstrui.exe , and press Enter
restore should run, pick a date before infection.
 
then run malwarebytes and hitmanpro

Read other 3 answers
RELEVANCY SCORE 54

A laptop that a family member of mine uses, (Medion Akoya), is infected with Windows Advanced Security Center. As you may well know, this program blocks many things.
 
Even in Safe Mode with Networking (and other Safe Modes), this program still pops up and causes havoc. Lastly, I used my USB drive to transfer rkill (iExplore.exe) to the infected laptop's Desktop. Even if I restart in Safe Mode and try to quickly run iExplore.exe, Windows Advanced Security Center still blocks it!
 
Please help me in removing this problem and cleaning up the system overall. Thank you.

A:Computer infected with Windows Advanced Security Center

Hello -
(Sorry about the cricket, but we loved it over here)
 
Remove Security Center (Uninstall Guide) - Bleeping Computer
Our Online DIY removal directions start => Here <=
Please read this first and if you are unable to do the steps, we can offer further help.
 
 
Typically Windows Advanced Security Center is spread via peer to peer applications, free movie download site, software sharing program, email attachments, social networking sites and other many malicious web sites. Sometime it hacks other good website and use it bait.
 
 
Alternate Instructions for you - How to remove Windows Advanced Security Center
 
Step 1: Print out these instructions as you will need to shutdown the computer in next step.
Step 2: Now power down the Windows Advanced Security Center infected computer. And wait for 30 Seconds before you turn on
Step 3: Now please turn ON the computer and immediately keep hitting F8 until you see WINDOWS ADVANCED OPTIONS MENU
Step 4:In the WINDOWS ADVANCED OPTIONS MENU, go down to the SAFE MODE WITH NETWORKING using the arrow keys on the board. Then press ENTER on the keyboard. This will take your computer to Safe mode. Safe Mode will cause the display and desktop icons to appear changed. This is normal. No need to Panic as it is due to Windows Advanced Security Center.
Step 5: This, Windows Advanced Security Center, infection may change computer windows settings to use a proxy server that will not allow you to brows... Read more

Read other 7 answers
RELEVANCY SCORE 54

DDS will not run, so I have no logs.
 
This Windows 7 computer (not mine) is a mess. 
 
A firewall notification pops up in the bottom right corner when I try to open most programs. 
Browsers don't connect to the internet, even though the laptop is connected.
 
And the stunning Windows Advanced Security Center window is front and center.
 
Thanks for your help!
 
indigo

A:Windows Cleaning Toolkit/Windows Advanced Security Center

Hi there,please start the computer in safe mode and try to run a FRST scan there:Please download Farbar Recovery Scan Tool and save it to your Desktop.(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)Start FRST with administator privileges.Make sure the option Addition.txt is checked and press the Scan button.When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.Please copy and paste these logs in your next reply.

Read other 10 answers