{"id":2669,"date":"2024-03-27T13:44:26","date_gmt":"2024-03-27T12:44:26","guid":{"rendered":"https:\/\/kb.apptec360.com\/manual\/?post_type=knowledgebase&p=2669"},"modified":"2024-05-03T15:13:38","modified_gmt":"2024-05-03T13:13:38","slug":"firewall-rules","status":"publish","type":"knowledgebase","link":"https:\/\/kb.apptec360.com\/manual\/knowledgebase\/configuration-windows-10-pc\/general\/security-management\/security-configuration\/firewall-rules\/","title":{"rendered":"Firewall Rules"},"content":{"rendered":"\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Firewall Rules<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Name<\/p>
\n <\/td>


\n

Name of the rule<\/p>
\n <\/td>\n<\/tr>\n


\n

Description<\/p>
\n <\/td>


\n

Description of the rule<\/p>
\n <\/td>\n<\/tr>\n


\n

Action<\/p>
\n <\/td>


\n

Specify whether this rule will block the traffic, or allow it. Please consider that the Block option could also block the traffic (depending of the rest of the configuration) between the MDM server and the Device<\/p>
\n <\/td>\n<\/tr>\n


\n

Direction<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Enable Edge traversal (Only available when Direction<\/strong> is set to inbound traffic<\/strong>)<\/p>
\n <\/td>


\n

Indicates that specific inbound traffic is allowed to tunnel throughout NAT’s and other edge devices using the Teredo tunneling technology.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Programs & services<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Define applications, all otherwise<\/p>
\n <\/td>


\n

If not enabled, then it will consider all applications<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Package Family Name<\/p>
\n <\/td>


\n

The Package Family Name that the rule will apply to.<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

File path of the application<\/p>
\n <\/td>


\n

The full application such as C:\\Windows\\System\\Notepad.exe that the rule will apply to<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Fully Qualified Binary Name<\/p>
\n <\/td>


\n

The Fully Qualified Binary Name that the rule will apply to. A FQBN is a string in the following form: {Publisher\\Product\\Filename,Version}<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Service Name<\/p>
\n <\/td>


\n

Enter the name of a Service (e.g “EventLog”). You can get a list of Service Names on Powershell by running the command “Get-Service”.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n

<\/div>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Protocols & ports<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Protocol<\/p>
\n <\/td>


\n

The protocol used by the rule.<\/p>
\n <\/td>\n<\/tr>\n


\n

Available values:<\/p>
\n

– Any<\/p>
\n

– Custom<\/p>
\n

– HOPORT<\/p>
\n

– ICMPv4<\/p>
\n

– IGMP<\/p>
\n

– TCP<\/p>
\n

– UDP<\/p>
\n

– IPv6<\/p>
\n

– IPv6-Route<\/p>
\n

– IPv6-Frag<\/p>
\n

– GRE<\/p>
\n

– ICMPv6<\/p>
\n

– IPv6-NoNxt<\/p>
\n

– IPv6-Opts<\/p>
\n

– VRRP<\/p>
\n

– PGM<\/p>
\n

– L2TP<\/p>
\n <\/td>


\n

When set to Custom<\/p>
\n <\/td>


\n

Insert a protocol number between 0 and 255<\/p>
\n <\/td>


\n

The protocol number<\/p>
\n <\/td>\n<\/tr>\n


\n

When set to TCP or UDP<\/p>
\n <\/td>


\n

Specify local ports, all will be used otherwise<\/p>
\n <\/td>


\n

Local ports that the rule will use, range ports are also allowed<\/p>
\n <\/td>\n<\/tr>\n


\n

Local Port<\/p>
\n <\/td>


\n

Single port or a range of ports. E.g. 100-120,200,300-320.<\/p>
\n <\/td>\n<\/tr>\n


\n

Specify remote ports, all will be used otherwise<\/p>
\n <\/td>


\n

Remote ports that the rule will use, range ports are also allowed<\/p>
\n <\/td>\n<\/tr>\n


\n

Remote Port<\/p>
\n <\/td>


\n

Single port or a range of ports. E.g. 100-120,200,300-320.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Scope<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Specify local IPs, any IP otherwise<\/p>
\n <\/td>


\n

Set of local IPs, it can be also a range of IPs separated by –<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Local IP address<\/p>
\n <\/td>


\n

Set of single IPs or a range of IPs separated by –<\/p>
\n <\/td>\n<\/tr>\n


\n

Specify remote IPs, any remote IP otherwise<\/p>
\n <\/td>


\n

Specify a set of remote IPs, it can be also a range of IPs separated by “-“.<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Remote IP address<\/p>
\n <\/td>


\n

Specify single IPs or a range of IPs<\/p>
\n <\/td>\n<\/tr>\n

<\/td>
\n

Tokens<\/p>
\n <\/td>


\n

Tokens that can be set along with Remote Addresses. Tokens Intranet, RmtIntranet and Ply2Renders are supported in Windows 10, version 1809 and later.<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\n\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Advanced Settings<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Specify profiles, all will be used otherwise<\/p>
\n <\/td>


\n

If disabled all profiles will be used<\/p>
\n <\/td>\n<\/tr>\n


\n

Domain<\/p>
\n <\/td>


\n

Domain Profile<\/p>
\n <\/td>\n<\/tr>\n


\n

Private<\/p>
\n <\/td>


\n

Private Profile<\/p>
\n <\/td>\n<\/tr>\n


\n

Public<\/p>
\n <\/td>


\n

Public Profile<\/p>
\n <\/td>\n<\/tr>\n


\n

Specify interfaces, all will be used otherwise<\/p>
\n <\/td>


\n

If disabled all interfaces will be used<\/p>
\n <\/td>\n<\/tr>\n


\n

Local Area Network<\/p>
\n <\/td>


\n

Local Area Network interface<\/p>
\n <\/td>\n<\/tr>\n


\n

Remote Access<\/p>
\n <\/td>


\n

Remote Access interface<\/p>
\n <\/td>\n<\/tr>\n


\n

Wireless<\/p>
\n <\/td>


\n

Wireless interface<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n\n\n\n\t\n\t\n\t
Edit<\/a><\/caption>\n

\n

Local Principals<\/strong><\/p>
\n <\/td>\n<\/tr>\n


\n

Add authorized local users<\/p>
\n <\/td>


\n

Allow to add a list of local users that will use this rule<\/p>
\n <\/td>\n<\/tr>\n


\n

Authorized users<\/p>
\n <\/td>


\n

List of authorized local users for this rule. The user must be in Security Description Definition language (SDDL) format, e.g. PC_NAME\\USERNAME. This field must not be filled if a service name is set to use this rule<\/p>
\n <\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n\n\n\n

<\/div>\n","protected":false},"parent":2621,"menu_order":0,"template":"","class_list":["post-2669","knowledgebase","type-knowledgebase","status-publish","hentry"],"acf":[],"_links":{"self":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2669","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase"}],"about":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/types\/knowledgebase"}],"version-history":[{"count":9,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2669\/revisions"}],"predecessor-version":[{"id":6928,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2669\/revisions\/6928"}],"up":[{"embeddable":true,"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/knowledgebase\/2621"}],"wp:attachment":[{"href":"https:\/\/kb.apptec360.com\/manual\/wp-json\/wp\/v2\/media?parent=2669"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}