Windows Firewall Check

Issue

Windows Firewall is firewall software that provides protection for computers by controlling what information is communicated from your computer to and from the Internet or other computers on a network. ICF is included in Windows® XP and Windows Server 2003 Standard Edition and Enterprise Edition. Windows XP Service Pack 2 and service packs for Windows Server 2003 include the enhanced features of Windows Firewall.

The scanned computer does not have Windows Firewall enabled on all network connections.

Notes

• MBSA does not detect whether another firewall (either hardware or software) is in use and protecting the scanned computer.

Solution

Enable Windows Firewall on each network connection on your computer.

Windows XP and Windows XP Service Pack 1 Instructions

To enable Windows Firewall manually for a network connection:

1. In Control Panel, double-click Networking and Internet Connections, and then click Network Connections.
2. Right-click on the connection on which you want to enable ICF, and then click Properties.
3. On the Advanced tab, click the box to select the option to "Protect my computer or network."

Notes

• If you want to enable the use of some applications and services through the firewall, enable them by clicking the Settings button and then selecting the programs, protocols, and services to be enabled for the ICF configuration. Refer to the Knowledge Base article on manually opening ports listed below under Additional Configuration.

Windows XP Service Pack 2 and Windows Server 2003 Instructions

To turn Windows Firewall on with no exceptions:

You must be logged on as an administrator or a member of the Administrators group in order to complete this procedure. If your computer is connected to a network, network policy settings might also prevent you from completing this procedure.

1. Open Windows Firewall.


2. On the General tab, click On.


3. Select the Don’t allow exceptions check box.

Notes

• Be sure to check the system requirements to permit an MBSA remote scan before configuring the firewall settings. Unless you do this, MBSA may be unable to remotely scan the security compliance of your Windows XP Service Pack 2 computers.

• To open Windows Firewall, click Start, click Control Panel, and then click Windows Firewall.

• When you select Don't allow exceptions, Windows Firewall blocks all requests to connect to your computer, including those from programs or services on the Exceptions tab. The firewall also blocks file and printer sharing, and discovery of network devices.

• Using Windows Firewall with no exceptions is useful when you connect to a public network, such as one at an airport or hotel. This setting can help to protect your computer by blocking all attempts to connect to your computer.

• When you use Windows Firewall with no exceptions, you can still view Web pages, send and receive e-mail, or use an instant messaging program.
  

To enable Windows Firewall manually for a network connection:

1. In Control Panel, double-click Networking and Internet Connections, and then click Network Connections.
2. Right-click the connection on which you want to enable Windows Firewall, and then click Properties.
3. On the Advanced tab, click the box to select the option to "Protect my computer or network."

Windows Server 2003 Service Pack 1 Instructions

1. In Control Panel, double-click Add or Remove Programs.
2. Click Add/Remove Windows Components, select the Security Configuration Wizard check box, and then click Next.
3. Run the wizard to create and apply a security policy that configures the Windows Firewall based on the roles and applications required on the server.

Additional Information

How to: Enable or Disable Windows Firewall in Windows XP

How to Manually Open Ports in Windows Firewall in Windows XP

Learn About Firewalls

©2002-2005 Microsoft Corporation. All rights reserved.