Windows 10: Windows Defender Firewall is using settings that make the device unsafe

Hi all,

We have a few machines where they are showing "Windows Defender Firewall is using settings that make the device unsafe" message when viewing "firewall and network protection." We are running 1809 enterprise with the latest August update.


Under "security providers",both Defender and Windows firewall are shown as turned on.


So i have checked the firewall, in settings, control panel and registry and it is on as managed by our policies

However, looking at defender settings it shows as below, and I can not seem to run a quick scan.

I have checked real time protection by creating a dummy file and it was picked up by defender, so I know real time protection is working, however the settings console states it is turned off (as shown below)










I just want to understand what the issue is, so I can deploy a fix for our other clients

:)

 

Windows Defender Firewall alarm notification

Note: below is a Windows Defender FIREWALL question - I couldn't locate a category specifically for "firewall".

We have recently set (what seemed to be) common sense firewall settings via GPO, in a domain environment. They are as follows:

Domain:

Firewall On (Green shield shows on managed workstations)

Inbound connections that do not match a rule are allowed. (Green shield shows on managed workstations)

Outbound connections that do not match a rule are allowed. (Green shield shows on managed workstations)

Private (for when users are at home, possibly?):

Firewall is on. (Green shield shows on managed workstations)

Inbound connections that do not match a rule are blocked. (this was listed as 'default' in GPMC) (Red 'block' symbol now appears on managed workstations)

Outbound connections that do not match a rule are allowed. (Green shield shows on managed workstations)

Public:

Firewall On (Green shield shows on managed workstations)

Inbound connections that do not match a rule are blocked. (this was listed as 'default' in GPMC) (Red 'block' symbol now appears on managed workstations)

Outbound connections that do not match a rule are allowed. (Green shield shows on managed workstations)

Users are being presented with the Defender 'alarm' icon in the taskbar, and in 'Firewall and Network Protection' a message appears that "Windows Defender Firewall is using settings that may make your device unsafe. By process of elimination, I have determined
that the 'Inbound connections' settins in the Private and Public profiles are causing this message to appear.

Two questions:

1) is this not the recommended (hence the 'default' indication in GPMC for these firewall profiles? I'd think you would want to block unsolicited inbound connections for applications for which you haven't explicitly allowed in untrusted environments?

2) If the answer to question #1 is "yes", is there a way to suppress this warning? Users will surely react to the indication that their device may be 'unsafe'.

thanks,

Andrew

**Moved from Virus and Malware / Windows Defender / Scanning, Detecting, and Removing Threats / Windows 10**

 

windows defender firewall

Hi Faye,

Third-party antivirus programs usually have their own uninstallers provided by the software developer. We suggest checking the developer's website or contacting their support team for assistance with uninstalling their program. After fully uninstalling the
third-party antivirus software, you may turn on Windows Defender by following these steps:

• Click Start.
• Type Windows Defender Security Center and press Enter.
• Click Firewall and network protection.
• Click Private (discoverable) network and click On.
• Click Public (non-discoverable) network and click On.

Let us know if you have any other concerns about Windows Defender.

 

Firewall Windows 10... reset?


Finally, Weybrew!

Turn Windows Defender Firewall on or off

You should always run Windows Defender Firewall even if you have another firewall turned on. Turning off Windows Defender Firewall might make your device (and your network, if you have one) more vulnerable to unauthorized access.

• To turn Windows Defender Firewall on or off, select the Start button, and then select Settings > Update & Security > Windows Security > Firewall & network protection. Choose a network profile, and then under Windows Defender Firewall, switch the setting to On or Off.
• Note: If your device is connected to a network, network policy settings might prevent you from completing these steps. For more info, contact your administrator.

Learn more about protecting your PC from viruses.




Last Updated: Apr 30, 2018

This comes directly from Microsoft and the first sentence says it all! Don't turn off Windows Defender or its firewall!

Yup, I was wrong and I'm sorry I misled you. Here's the URL:

https://support.microsoft.com/en-us/...wall-on-or-off