Certain rules can also
be defined using Group Policy. For now, let??™s focus on the MMC snap-in that is available
in Server Manager.
When you click the Windows Firewall with Advanced Security snap-in, a summary
pane is displayed in the middle of the Server Manager console, as shown in Figure 3-20.
At the top of this pane is an Overview section listing the status of each of the three connection
profiles. It indicates which profile is active along with the state of the firewall under
each profile and whether inbound or outbound connections are allowed or blocked
by default.
To make changes to these connection-based profiles, click the Windows Firewall
Properties link at the bottom of the Overview section. You will see a tab for each of the
connection profiles and an additional tab for IPSec Settings. Each of the tabs allows you
81 Chapter 3: Server Manager
to change the state of the firewall for that profile. If you turn on the firewall, you then have
the option of setting the general inbound or outbound connection rules (Figure 3-21). For
Inbound Connections, you can select Block (Default), Block All Connections, or Allow
(see the following table). For Outbound Connections, you can select Allow (Default) or
Block. You can also change settings to control the Windows Firewall behavior. You can
notify the logged on user when inbound connections are blocked, and you can allow
unicast responses to multicast or broadcast requests sent out from the server.
Pages:
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122