MCTS 70-680: Windows 7 FirewallOctober 19, 2019
Welcome back to your free Training course for Windows 7. In this video I will look at the Windows Firewall included in Windows 7. The firewall was first introduced in service pack 2 in Windows XP. Since then it has been included with every operating system and continues to improve. Before I start looking at the Windows Firewall I will first look at why you need a firewall at all. Even before Windows came with a firewall companies would deploy a firewall on their network. The firewall would protect clients on the network from attackers on the internet. The first firewalls were packet filtering firewalls. These simple firewalls allowed traffic through based on the port which it was sent on or received on. The problem with this approach is that if you open a port for say web traffic, an attack could sent data to a client computer that was never ask for over the web traffic port. To prevent this from happening, statefull firewalls were created.
These firewalls keep track of connections that are made. If a connection is made then traffic returning from that connection is allowed back in. However, if traffic arrived that was not asked for it is blocked. This works well when you are behind a company firewall, but there are two problems with this. Firstly if a computer is behind the firewall gets infected, it can then infect other computers on the network. The second problem is when the computer leaves the network and joins anther network. This is common with laptops. For example, when the laptop connects to a wireless hot spot or connects up vial a dial up or remote connection. In either case, the computer is connected to the public internet and can become infected. To prevent this for happening, Microsoft included the Windows Firewall in their operating systems. This means that if the computer is connected on the same network that anther computer is connected to which is infected, the local firewall on the computer will hopefully stop the computer from becoming infected.
What you are doing will determine what kind of rules and security you will require. To make change between networks easier when using the Windows Firewall, Microsoft has created network locations. The network location awareness service in Windows 7 will automatically attempt to change your network based on which network you are connected to. When you first install a network adapter, Windows will give you this prompt to help identity which network it is. The network location that is selected will determine the rules that will be used in the firewall.
When the home or work locations are used you may want to allow file sharing. When connected to a public network you may want to disable file sharing. Now let’s have a look at how to configure the Windows Firewall on Windows 7. To configure the basic firewall settings, open the control panel and select the option system and security. From here, select the option Windows Firewall. On this screen you get a basic overview of the firewall on this computer. At the top you can see that the home or work network is currently connected. At the bottom the network location public networks are not connected. If you had a wireless adapter in the computer and are worried about security, you may want to configure this adapter to use the public network settings. If at some point you need to change the location manually for the network adapter, select the option down the bottom network and sharing center.
The network and sharing center will show you basic information about your network, which networks are connected and allows you create new connections for example vpn connections back to your office. Here you can see the active networks. Currently or network adapter is connected to the domain training dot local and the network location work network. Once I select work network I will be given the option to choose which network my network adapter is connected to. In this case I will leave it on the current setting and go back into the basic firewall configuration screen.
By default, Windows will alert you when a program running on your computer is blocked by the firewall. If you want to configure the settings manually, you can select the option allow a program or feature through Windows Firewall. You may need to configure the setting manually if you have incoming connections that are being blocked. Windows will not alert you if an incoming connection is blocked, you will only receive alerts for connections that are blocked when they originated from your computer. On this screen you can see which programs are being allowed through and which network locations that are enabled.
At first all the options will be grayed out, to makes changes press the button at the top change settings. Now I can change the settings, for example I can change file and printer sharing to allowed for home and work but I will still leave it disabled for the public network. In most cases, when you configure a service like file and printer sharing, when you enable it Windows it will automatically ask you if you want to make changes to the firewall.
If however you want to fine tune it later or the change does not occur you can always come in here and set the setting yourself. Most programs should appear on the list, however if one does not you can always use the option allow anther program. This will allow you to browser to the executable for the program that you want to allow through the firewall. In some cases you may want to change how the Windows Firewall interacts with the user. To do this, select the option change notification settings. On this screen you can select if the firewall is switched on or off and some basic settings for it. For example, you can configure each network location to block all incoming connections. This includes programs you ticked in the list of allowed programs.
When you connect up to a wireless hot spot, for example at the airport, you may want to configure this setting as this gives you the most security. The next option will notify the user when a new program is run on the local computer that is blocked by the firewall. This is a nice feature to have on because the prompt will automatically give the user the option to add rules to the firewall to allow the software through.
Doing this means the user does not have to configure the firewall manually. This covers all the basic settings for the Windows Firewall. In the next video I will look at the advanced options for the Windows firewall. Using this tool you can really customized your firewall. Thanks for watching this video. Remember to go to our web site for more videos, exam questions and study guides. .
As found on Youtube