Firewall policies

Question 1

What are the three profile types you can choose when configuring Windows Defender Firewall?

Answer 1

1. Windows Firewall
2. Windows Firewall rules
3. Windows Hyper-V Firewall Rules

Question 2

What does Windows Firewall provide?

Answer 2

Host-based, two-way network traffic filtering for a device

Question 3

What is the purpose of Windows Firewall?

Answer 3

To block unauthorized network traffic flowing into or out of the local device

Question 4

What can Windows Firewall rules define?

Answer 4

Granular Firewall rules, including specific ports, protocols, applications, and networks

Question 5

How many custom rules does each instance of the Windows Firewall profile support?

Answer 5

Up to 150 custom rules

Question 6

What does the Windows Hyper-V Firewall Rules template allow you to control?

Answer 6

Firewall rules that apply to specific Hyper-V containers on Windows

Question 7

Which applications are included in the Windows Hyper-V Firewall Rules?

Answer 7

Windows Subsystem for Linux (WSL) and Windows Subsystem for Android (WSA)

Question 8

Fill in the blank: Windows Firewall provides _______ network traffic filtering.

Answer 8

[host-based, two-way]

Question 9

True or False: Windows Firewall can block authorized network traffic.

Answer 9

False

Question 10

What are the 7 steps to implement Windows Defender Firewall in Intune ?

Answer 10

1. Go to Endpoint security > Firewall, select Create Policy.
2. Platform : Windows.
3. Profile : Windows Firewall
4. Name + Description
5. Configuration settings
   ■ Firewall Determines the fundamental state of the firewall for domain, private, and public network location profiles
   ■ Auditing Defines the required firewall auditing settings
   ■ Network List Manager, which defines TLS endpoint settings
6. Scope tags
7. Assignments

Question 11

What are the 7 steps to implement Windows Firewall rules in Intune ?

Answer 11

1. Go to Endpoint security > Firewall, select Create Policy.
2. Platform : Windows.
3. Profile : Windows Firewall Rules
4. Name + Description
5. Configuration settings
   ■ State (enabled or disabled)
   ■ Name
   ■ Interface Types
   ■ Remote Port Ranges
   ■ Action (Allow or Block)
   ■ Protocol
6. Scope tags
7. Assignments

Question 12

What is the firewall profile you can configure on macOS devices?

Answer 12

MacOS Firewall

Question 13

For macOS firewall policy, what are the 2 options to configure (configuration settings)?

Answer 13

• Firewall
• Applications

they are under networking

Question 14

For macOS firewall policy, in Firewall, what are the 5 settings you can configure?

Answer 14

• Enable Stealth Mode
• Enable Firewall
• Allow Signed : If true, allows built-in software to receive incoming connections
• Block All Incoming
• Allow Signed App

Question 15

For macOS firewall policy, in Applications, what can be configure?

Answer 15

By application Bundle ID, configure the allowed connection for the app

Question 16

What do Firewall policy reports display?

Answer 16

Status details about the firewall status for managed devices

Supports devices running Windows 10/11

Question 17

What is the default view when opening the Firewall node in Microsoft Intune?

Answer 17

Summary

Accessed via Endpoint security > Firewall > Summary

Question 18

What information does the Firewall Summary view provide?

Answer 18

Aggregate count of devices with firewall off and a list of Firewall policies including:
* Name
* Type
* Assignment status
* Last modified date

Question 19

Where can you find the report for MDM devices running Windows 10 or later with the firewall off?

Answer 19

Endpoint security node > Firewall > MDM devices running Windows 10 or later with firewall off

Accessed via Endpoint security > Firewall > MDM devices running Windows 10 or later with firewall off

Question 20

What is the purpose of the MDM Firewall status for Windows 10 and later report?

Answer 20

To provide organizational status details about firewall settings

Accessed via Reports > Firewall > MDM Firewall status for Windows 10 and later

Question 21

What are the possible statuses in the MDM Firewall status report?

Answer 21

Statuses include:
* Enabled
* Disabled
* Limited
* Temporarily Disabled
* Not applicable

Question 22

What does the ‘Enabled’ status indicate in the MDM Firewall status report?

Answer 22

The firewall is on and successfully reporting

Question 23

What does the ‘Disabled’ status indicate in the MDM Firewall status report?

Answer 23

The firewall is turned off

Question 24

What does the ‘Limited’ status indicate in the MDM Firewall status report?

Answer 24

The firewall isn’t monitoring all networks or some rules are turned off

Question 25

What does the 'Temporarily Disabled' status indicate in the MDM Firewall status report?

Answer 25

The firewall is temporarily not monitoring all networks

Question 26

What does the 'Not applicable' status indicate in the MDM Firewall status report?

Answer 26

The device doesn’t support firewall reporting

Question 27

What operating systems do firewall reports support for managed devices?

Answer 27

Windows 10/11 ## Footnote Firewall reports are specifically designed to monitor and manage devices running these versions of Windows.

Question 28

How to trouleshoot firewal issues

Answer 28

* conflicts for policies * eventviewer on windows