Windows Firewall

Question 1

Block Internet on Servers

Answer 1

Block TCP Port 80 outbound.

Question 2

Inbound & Outbound traffic command

Answer 2

netstat -bn

Question 3

Ephimiral Ports

Answer 3

Ports the websites respond with to the requesting machine. Typically High numbers i.e. 497455

Question 4

Windows Firewall GPO Creation

Answer 4

GPME. /Polices/Windows Settings/Security Settings/Windows Firewall with Advanced Security

• Allow Outbound connections within the Private profile tab.
• Block Inbound connections. Block in order to protect users from receiving inbound connections they didn’t ask for.
• Display notification of blocked programs
• Allow unicast response.

Question 5

Manage firewall through Powershell

Answer 5

netsh advfirewall firewall /?

Question 6

Create new firewall rule in Powershell

Answer 6

New-NetFirewallRule