Important This article contains information that shows you how to help lower security settings or how to turn off security features on a computer. You can make these changes to work around a specific problem.
INTRODUCTION
Microsoft Windows XP Service Pack 2 (SP2) introduces a new firewall that helps make your system less vulnerable to attack by malicious users or by malicious software, such virus software. We recommend that you always run with a firewall. Without a firewall, you may be more prone to security issues. We do not recommend that you turn off Windows Firewall, but an option exists to do this. This article describes how to disable the Windows Firewall. If you turn off Windows Firewall, take appropriate additional steps to help protect your system. We recommend that you turn off Windows Firewall only when you really have to and only after you have explored all options to make your system more secure. Windows Firewall is the updated firewall software in Windows XP Service Pack 2 that replaces Internet Connection Firewall (ICF).
How to configure Windows Firewall settings
To examine and configure your firewall settings, follow these steps:
| 1. | Click Start, click Run, type wscui.cpl and then click OK. |
| 2. | In Windows Security Center, click Windows Firewall. |
Windows Firewall includes the following tabs:
| � | General |
| � | Exceptions |
| � | Advanced |
The General tab includes the following settings:
| � | On (recommended) |
| � | Don't allow exceptions |
| � | Off (not recommended) |
When you click to select Don't allow exceptions, Windows Firewall blocks all requests to connect to your computer, including requests from programs or services that are listed on the Exceptions tab. The firewall also blocks discovery of network devices, file sharing, and printer sharing.
The Don't allow exceptions option is useful when you connect to a public network, such as one that is associated with an airport or with a hotel. This setting helps protect your computer by blocking all attempts to connect to your computer.
When you use Windows Firewall with no exceptions, you can still view Web pages, send and receive e-mail, or use an instant messaging program.
The Exceptions tab lets you add program and port exceptions to permit certain types of inbound traffic. You can set a scope for each exception.
For home and small office networks, we recommend that you set the scope to the local network only, if it is possible. This configuration enables computers on the same subnet to connect to the program on the computer, but drops traffic that originates from a remote network.
The Advanced tab lets you configure the following:
| � | Connection-specific rules that apply for each network interface. |
| � | The Security Logging configuration. |
| � | Global Internet Control Message Protocol (ICMP) rules that apply to ICMP traffic. (This traffic is used for error and status information transmission.) |
| � | Default settings. |
How to configure file sharing
For home and small office networks, use the Network Setup Wizard to configure file sharing. With this wizard, you make sure that the firewall is configured with the highest security possible. In a typical home network, all computers are in the same subnet. In such a configuration, we recommend that you configure file sharing only for local computers.
Note To start the Network Setup Wizard, click Start, click All Programs, click Accessories, click Communications, and then click Network Setup Wizard.
Details:
REFERENCES
For additional information, visit the following Microsoft Web sites:
TechNet Windows XP Professional Web site
http://technet.microsoft.com/en-us/windowsxp/default.aspx
Manually Configuring Windows Firewall in Windows XP Service Pack 2
http://technet.microsoft.com/en-us/library/bb877979.aspx
Using the Windows Firewall INF File in Microsoft Windows XP Service Pack 2
http://www.microsoft.com/downloads/details.aspx?FamilyID=cb307a1d-2f97-4e63-a581-bf25685b4c43&displaylang=en
Deploying Windows Firewall Settings for Microsoft Windows XP with Service Pack 2
http://www.microsoft.com/downloads/details.aspx?familyid=4454e0e1-61fa-447a-bdcd-499f73a637d1&displaylang=en
No comments:
Post a Comment