Windows Firewall Article Index for
Windows
Website Links For
Windows
 

Information About

Windows Firewall




Windows Firewall is a Personal Firewall , included with Microsoft 's Windows XP , Windows Server 2003 , and Windows Vista operating systems.


OVERVIEW

When Windows XP was originally shipped in October 2001 , it included a limited firewall called "Internet Connection Firewall". It was disabled by default due to concerns with backward compatibility, and the configuration screens were buried away in network configuration screens that many users never looked at. As a result, it was rarely used. In mid-2003, the Blaster Worm attacked a large number of Windows machines, taking advantage of flaws in the RPC Windows service. Several months later, the Sasser Worm would do something similar. The ongoing prevalence of these worms through 2004 would result in unpatched machines being infected within a matter of minutes. Because of these incidents, as well as other criticisms that Microsoft was not being proactive in protecting customers from threats, Microsoft decided to significantly improve both the functionality and the interface of Windows XP's built-in firewall, and rebrand it as, simply, "Windows Firewall".

Windows Firewall was first introduced as part of Windows XP Service Pack 2. Every type of network connection, whether it is wired, wireless, VPN, or even Firewire, has the firewall enabled by default, with some built-in exceptions to allow connections from machines on the local network. It also fixed a problem whereby the firewall policies would not be enabled on a network connection until several seconds after the connection itself was created, thereby creating a window of vulnerability. A number of additions were made to Group Policy , so that Windows system administrators could configure the Windows Firewall product on a company-wide level.

Windows Firewall turned out to be one of the two most significant reasons (the other being DCOM activation security ) that many corporations did not upgrade to Service Pack 2 in a timely fashion. Around the time of SP2's release, a number of Internet sites were reporting significant application compatibility issues, though the majority of those ended up being nothing more than ports that needed to be opened on the firewall so that components of distributed systems (typically back-up and antivirus solutions) could communicate.

In March 2005 , Microsoft released Windows Server 2003 Service Pack 1, which incorporated the same improvements to the firewall product into their server operating system.


WINDOWS VISTA


The next version of Windows, Windows Vista , will significantly improve the firewall, to address a number of concerns around the flexibility of Windows Firewall in a corporate environment:
  • Outbound packet filtering, reflecting increasing concerns about Spyware and Viruses that attempt to "phone home"

  • With the advanced packet filter rules you can also specify the source and destination IP addresses and port ranges

  • Full support for IPv6 connection filtering

  • IPSec is fully integrated, allowing connections to be allowed or denied based on security certificates, Kerberos authentication, etc. Encryption can also be required for any kind of connection.

  • A new Management Console which provides access to many advanced options, and enables remote administration.

  • Ability to configure per-user exceptions and settings in a Windows Domain environment

  • Ability to have separate firewall profiles for when a computer (typically laptops) is and is not connected to a corporate network




REFERENCES



  Url http://newscomcom/Study:+Unpatched+PCs+compromised+in+20+minutes/2100-7349_3-5313402html
  Title Study: Unpatched PCs compromised in 20 minutes
  Publisher CNet
  Date 2004-08-17
  Accessdate 2006-01-24


  Author Joseph Davies
  Year February, 2004
  Url http://wwwmicrosoftcom/technet/community/columns/cableguy/cg0204mspx
  Title Manually Configuring Windows Firewall in Windows XP Service Pack 2
  Work The Cable Guy
  Publisher MSDN Magazine
  Accessdate January 24
  Accessyear 2006


  Author Microsoft
  Year August, 2004
  Url http://wwwmicrosoftcom/technet/prodtechnol/winxppro/maintain/mangxpsp2/mngsecpsmspx#ECAA
  Title Managing Windows XP Service Pack 2 Features Using Group Policy
  Publisher Microsoft TechNet
  Accessdate January 24
  Accessyear 2006


  Author Joseph Davies
  Year January, 2006
  Url http://wwwmicrosoftcom/technet/community/columns/cableguy/cg0106mspx
  Title The New Windows Firewall in Windows Vista and Windows Server "Longhorn"
  Work The Cable Guy
  Publisher MSDN Magazine
  Accessdate January 24
  Accessyear 2006




SEE ALSO



EXTERNAL LINKS