Windows 10: Windows Firewall Public Profile - how to close open ports that are being used by malicious...

I have been configuring Windows Firewall Public Profile managed by Intune. Malicious external IPs are using open ports on devices for NTLM request trying to sign in with user name/passwords, random accounts and passwords, trying to get into the devices. So far they have been unsuccessful, but I am looking on how to stop these NTLM request for log in completely. Ports can be different, from high range to lower, from 9000 to 60000 and higher, how to manage this case with Intune settings without affecting apps and end users? One option is closing ports with Firewall rules, but as far as I u

:)

 

Windows 10 Firewall will not open port

Hi Mike,

Thank you for posting in Microsoft Community. I understand your concern and I am glad to assist you.

If Windows Firewall is blocking an application and you want to allow that application to receive info through the firewall, you can usually do that by selecting the application in the list of allowed applications, as described in the previous section.

However, if the application isn't listed, you might need to open a port (a way for applications to receive info through the firewall).

For example, to play a multiplayer game with friends online, you might need to open a port for the game so that the firewall allows the game info to reach your PC. A port stays open all the time, so be sure to close ports that you don't need open any more.

• 
  Open Windows Firewall by swiping in from the right edge of the screen, tapping
  Search (or if you're using a mouse, pointing to the upper-right corner of the screen, moving the mouse pointer down, and then clicking
  Search), entering firewall in the search box, and then tapping or clicking
  Windows Firewall.
  
• 
  Tap or click Advanced settings.
  
  You might be asked for an admin password or to confirm your choice.
  
• 
  In the Windows Firewall with Advanced Security dialogue box, in the left pane, tap or click
  Inbound Rules, then, in the right pane, tap or click New Rule.
  
• 
  Follow the instructions on your screen.
  

Hope this post helps. Get back to us for further queries. We are happy to help!

 

Windows 10 Firewall All Ports Open !

I was frankly shocked to find My Windows 10's Firewall having SEVERAL rules applying within the Public profile and allowing all traffic to hit local ports. I am using Public profile.

One Rule was called "Connect" and was allowing ALL.

When All ports are allowed inbound, basically you do not have a firewall. Since every port can be reached.

Here is a screenshot of one of the rules I had in my firewall.





I don't know how those rules got added. I don't have much games on my PC. Just one ( though tried few on Steam ) . No illegal software ( well maybe one piece) and yet my firewall is literally out.

Why Why Why. If someone like me could miss something like that, than every average PC user will.

Seems to me like Microsoft is as insecure as it was before the introduction of the firewall in Windows XP.

How can I check the effective opened ports. So many rules ffs.

 

Opening specific ports in Windows 10 Firewall

Hi Don,

Thank you for contacting Microsoft Community.

• Have you connected your computer to domain network?

I suggest you to disable the Firewall wait for 1 hour and check whether the ports are opened automatically or not, please do let us know with the result.

Hope this information is helpful and do let us know if you need further assistance. We will be glad to assist.