Advanced Security firewall Features for Windows 2008

In the process of managing and maintaining the LAN, network administrators may often encounter such a phenomenon, that is, some of the Internet users will often secretly use peer-to-peer tools in the local area network to download large volumes of movies or other multimedia data, this malicious download operation consumes the local area network limited valuable bandwidth resources, And it is easy to cause the entire LAN network can not run stably.

In fact, we can take advantage of the new advanced Security firewall features of the Win2008 system to control the malicious download behavior, considering the Peer-to-peer tool in the malicious download operation, through the system's 3077,3078 port for external network communication, we just let the Advanced Security firewall function limit 3077, 3078 Port to carry out network communication, you can prevent Internet users secretly using the Thunder such peer-to-peer tools for malicious download. We now use the Advanced Security Firewall feature of the Win2008 system to create secure access rules that prohibit Peer-to-peer tools from downloading connections:

First enter the Win2008 system desktop with system administrator privileges, click Programs on the Start menu, click Administrative Tools, click Server Manager, and from the left position of the Server Manager window that appears, position the mouse over the configuration node option, and then select the Target node option below. Advanced Security Firewall "project;

Second, open the "Advanced Security Firewall" Configuration interface, click on the left side of the interface to select the "Outbound Rules" feature option, and then select the new Rule feature option from the right side of the options that should function, and open the Secure Outbound Rule Creation wizard dialog box, and when the wizard dialog asks us what kind of control we want to perform, We should select the "port" option here so that the Advanced Security Firewall feature restricts network connections for 3077, 3078 ports on the local computer;

Next, click the Next button, select the TCP feature option in the wizard Settings dialog that appears, and select the specific local port option, at which point the specific local port text box is automatically activated, and the "3077,3078" port number is entered directly into the text box.

And then click the Next button, the wizard screen prompts you to ask what should be done when the connection meets the specified conditions, and this time we have to select the "Block Connection" feature option, then set the security rule to the specific scope of application, where we can select "domain", "private", "public" These application environments, and finally set an appropriate name for the newly created outbound rule, and then click the Finish button to end the security outbound rule creation, so that any Internet user who tries to do a malicious download in a local Win2008 system Win2008 system with the Advanced Security firewall function on the automatic interception of such malicious download, then the stability of the local network can be effectively guaranteed.