Execute scripts to turn on Firewall on Windows devices

Windows Firewall is a security mechanism that protects the device from unauthorized access. It helps secure the endpoints and permits you to create network rules for regulating network traffic. This doc assists you on how to configure firewall settings and rules using scripts via Hexnode UEM.

Setting up Windows Firewall using scripts

You can use both the Batch files and PowerShell commands to enable the firewall on Windows devices from the Hexnode console.

1. Batch Script

• To enable Firewall on all profiles specifically domain, private and public:
  Sample script

  MS DOS

  netsh advfirewall set allprofiles state on

  1	netsh advfirewall set allprofiles state on

• To add a Firewall rule name for any given application (for instance, Internet Explorer) meant for the inbound traffic to the device:
  Sample script

  MS DOS

  netsh advfirewall firewall add rule name=”SetUpFirewall” dir=in Program=”C:\Program Files\Internet Explorer” action=block

  1	netsh advfirewall firewall add rule name=”SetUpFirewall” dir=in Program=”C:\Program Files\Internet Explorer” action=block

• To open a port in Firewall:
  Sample script

  MS DOS

  netsh advfirewall firewall add rule name=”Allow Port 25” dir=in action=allow protocol=TCP localport=25

  1	netsh advfirewall firewall add rule name=”Allow Port 25” dir=in action=allow protocol=TCP localport=25

2. PowerShell Script

1. To enable Firewall on all profiles specifically domain, private and public:
   Sample script

   MS DOS

   Set-NetFirewallProfile -All -Enabled True

   1	Set-NetFirewallProfile -All -Enabled True

2. To add Firewall rule name for any given application (for instance, Internet Explorer) meant for the inbound traffic to the device:
   Sample script

   MS DOS

   New-NetFirewallRule –Name SetUpFirewall -DisplayName Enabling_firewall –Direction Inbound –Program C:\Program_Files\Internet_Explorer –Enabled True –Profile Any –Action Allow

   1	New-NetFirewallRule –Name SetUpFirewall -DisplayName Enabling_firewall –Direction Inbound –Program C:\Program_Files\Internet_Explorer –Enabled True –Profile Any –Action Allow

3. To open a port in Firewall:
   Sample script

   MS DOS

   New-NetFirewallRule –DisplayName ‘Allow Port 25’ -Direction Inbound –Action Allow –Protocol TCP –LocalPort 25

   1	New-NetFirewallRule –DisplayName ‘Allow Port 25’ -Direction Inbound –Action Allow –Protocol TCP –LocalPort 25

Notes:

• It is recommended to manually validate the script execution on a system before executing the action in bulk.
• Hexnode will not be responsible for any damage/loss to the system on the behavior of the script.