Windows 8: System Firewall Inbound Rules

Windows Security Tutorials - Herong's Tutorial Examples

∟Windows 8: System Firewall Inbound Rules

This section provides a tutorial example on how to review and modify Windows Firewall inbound rules that override the inbound-connection-blocked setting on Windows 8 system.

With Windows Firewall configured with following default settings, you should also review individual override rules on inbound connections.

Firewall state:         On (recommended)
Inbound connections:    Block (default)
Outbound connections:   Allow (default)

1. Go to "Control Panel\System and Security\Windows Firewall" and click the "Advanced Settings" link. You will see the firewall "Windows Firewall with Advanced Settings" screen.

2. Click "Inbound Rules" on the left of the screen. You will see a list of rules that override the "Inbound connections: Block (default)" global setting.

3. Review all rules. Pay attention to those with "Enabled=Yes", "Profile=All" and "Action=Allow". If you see any rule that is strange, do some research on it. If you think it's a security risk, you should disable it first and see it affects any applications you are using.

For example, I see 2 rules named as "McAfee Shared Service Host". They are all enabled on "Public" network and allowing "Any" remote computers to make inbound connection. I think these rules represent security risks to my computer. I don't any McAfee products installed on my computer. I need to disable them.

The picture below shows you the Windows Firewall inbound rules that override the "Inbound connections: Block (default)" global setting on Windows 8 system: