Configure the Windows Server 2008 firewall to make your system more secure

The firewall, integrated under Windows Server 2008, is more comprehensive than the firewall in Windows Server 2003 operating system, and the level of security protection is naturally higher, as long as the firewall program is properly configured to allow Windows The Server 2008 system runs more securely. This is not, this article will now recommend a few Windows Server 2008 System firewall configuration skills, I believe that with the help of these skills, we will be able to fully enjoy the system firewall to bring their own surprises!

Quick view of Windows Server 2008 firewall configuration status

Many times, we need to periodically look at the security configuration status of the Windows system with its own firewall, for example, to see if the current system has a firewall enabled, what type of profile the firewall is using, whether the firewall allows an exception mode of operation, and if the multicast/broadcast response mode is normally enabled, What network ports are currently open on all network connection interfaces, what are these open port numbers, and so on; Normally, we need to go to the Windows system with the firewall of the basic configuration interface, and then click on each of the Tab settings page, The configuration information above can be learned from each page. Obviously, it is troublesome to look at the configuration state of Windows Firewall in the above way, in fact, in the Windows Server 2008 system environment, we can skillfully take advantage of the system's own Netsh commands, To view all configuration status information for the system firewall at once, the following is the specific implementation step of the method:

First, open the Start menu in the Windows Server 2008 system desktop, select Program, Attachment, and then right-click the command Prompt command from the submenu, and select the Run as Administrator command from the pop-up shortcut menu. At this point the system screen will automatically switch to the DOS command Line work window;

Second, at the DOS command prompt at the work window, enter the string command "netsh", switch the system to the Netsh command configuration state after clicking Enter, then enter the string command "Firewall", and then click Enter The system will automatically enter the Windows Firewall command settings environment, when we will see the system screen appears on the prompt has become "netsh firewall";

Below at the netsh firewall prompt, enter the string command "show state", and after clicking Enter, we can see the Security Configuration status information for each aspect of the system's own firewall from the result interface shown in Figure 1; Here we found that the Windows system has a firewall with the standard configuration file, enabled the exception mode, the notification mode is disabled, multicast/broadcast response mode is enabled, and no network ports are open on all network connection interfaces at present.