How to configure WindowsXPSP2 Firewall _ security related

Brief introduction

Microsoft Windows XP Service Pack 2 (SP2) introduces a new firewall that helps protect your system from attacks by malicious users or malicious software such as virus software. We recommend that you always use a firewall when you are executing your computer. If you do not use a firewall, security issues may be more likely to occur. We recommend that you do not turn off Windows firewall, but still provide you with a shutdown option. This article describes how to disable Windows firewall. If you shut down Windows firewall, take the appropriate additional steps to help protect your system. We recommend that in order to make your system more secure, you should turn off Windows firewall only if you have tried all other options and have no choice. Windows Firewall is the updated firewall software in Windows XP Service Pack 2 to replace the original Internet Connection Firewall (ICF).

What is a firewall?

Firewalls help make your computer more secure. Firewalls can restrict the passing of information from other computers to your computer, allowing you to better control the data on your computer. In addition, firewalls can provide a line of defense to prevent others or programs (including viruses and worms) from attempting to connect to your computer without an invitation.

You can imagine a firewall as a barrier that checks for information (also known as traffic) from the Internet or from the network. Firewalls can either shut out the traffic or allow it to pass, depending on your firewall settings.

In Microsoft XP Service Pack 2 (SP2), you can turn Windows firewall off or on. By default, Windows Firewall is enabled for all network interfaces. This configuration can provide network protection for new Windows XP installations and upgrades. This default configuration also helps protect your computer from newly added network connections in your system.

Windows firewall is enabled by default, but some computer manufacturers and network administrators may be able to turn it off. You do not have to use Windows firewall, or you can install and execute any other firewalls to your liking. Review the capabilities of other firewalls and select the firewalls that match your needs. If you decide to install and perform other firewalls, turn off Windows firewall.
How to configure Windows firewall settings

Warning: This method may cause your computer or network to be more vulnerable to malicious users or malicious software such as viruses. This workaround is not recommended in this article and is for informational purposes only, and you should decide whether or not to implement this workaround yourself. Using this method requires your own risk.

To check and configure your firewall settings, follow these steps:

1. Click Start, click Execute, type Wscui.cpl, and then click OK.

2. In Windows Security Center, click Windows Firewall.

The following tabs are included in Windows firewall:

* "General"

* "Exceptions"

* "Advanced"

The General tab includes the following settings:

* "Enable (recommended)"

* "No Exceptions Allowed"

* "Off (not recommended)"

When you click to select Do not allow exceptions, Windows firewall blocks all requests to connect to your computer, even if the request is from a program or service listed on the Exceptions tab. Firewalls also prevent discovery of network devices, file shares, and printer sharing.

The "Do not allow exceptions" option is useful when you are connected to a public network (for example, a network associated with an airport or hotel). This setting can prevent all attempts to connect to your computer and thus help protect your computer.

When you use Windows Firewall and enable the "Do not allow exceptions" option, you can still view Web pages, send and receive e-mail messages, or use a live messaging program.

The Exceptions tab allows you to add program and port exceptions to allow specific types of incoming traffic. You can set the scope for each exception.

For home and small office networks, we recommend that you set the scope to LAN-only within possible conditions. This configuration makes it possible for computers on the same subnet to connect to programs on this computer, but to deny traffic originating from remote networks.

The Advanced tab allows you to configure the following:

* Apply connection-specific rules for each network interface.

* Secure Login "configuration.

* Global Internet Control Message Protocol (ICMP) rules applied to ICMP traffic (this traffic is used for error and delivery of state information.) ）

* Default settings.

How to configure file sharing

For home and small office networks, you can use the Network Setup Wizard to configure file sharing. You can use this wizard to ensure that firewalls are configured with the highest possible level of security. In a typical home network, all computers are in the same subnet. Under this configuration, we recommend that you configure file sharing only for local computers.

Note: To activate the Network Setup Wizard, click Start-Assemblies-satellite applications-Communications-Network Setup Wizard. "