firewall on or off on network

[Uraken]

Hi all i'm having continual problems connecting to machines remotely on our network etc because of the xp firewall, do otyhers have the same issues? do you turn it off internally? any thoughts or advice please?

as always thanks in advance.

[webman]

We turn it off internally, we don't see any point ihaving it turned on.

[beeswax]

same as Craig. It causes too many problems otherwise.

[Uraken]

is there any tool i can get that will do en-masse ? i came across one recently but can't find it now and it only worked on a few machines

[webman]

No idea, CC3 provided us with a GPO to configure ours (ports, exceptions, everything.. but it's easier to just turn it off).

[beeswax]

We do it as part of the image I'm afraid. Haven't really looked into any other way of doing it, and as a my wife says, I shouldn't be doing this as I'm on holiday.

[webman]

It's ok beeswax, we won't tell her if you don't

[Dos_Box]

Off here. Its too much work to be reconfiguring ports on the individual PCs. Besides, thats what our Cisco router, RBC firewall, AV software etc is for.
I have it on at home though, even though I have a nice Netgear router which does alot for me anyway.

[goodhead]

we turn ours off. we found it interfeared with sophos.
we control it with GPO

[Disease]

Group policy option to disable firewall.

[Uraken]

Thanks all had never managed to find it gpo before as its listed under networks, have made the neccassary changes and now just need to wait for the gpudate to take effect *tried with secops update but as the firewall is switched on it doesn't work.

[sidewinder]

I keep it on and create exceptions for programs that need it, theres only about 3 or 4

Theres not much point having it on though as its virtually useless as a firewall, and as we have our own and the LEA's its not needed

[ChrisH]

You can turn it off via:
GPO
An entry in the RIS answer file
Using the netsh command in a script.

[SteveT]

Off, Off, Off, Off, Off, Off, ............. etc.

[Gatt]

Yep ours is off at domain level as we found that it caused problems just trying to add PC's to the Domain!! why that was the case we don't know but as soon as the firewall was off we could join the domain.

Also no need for it as our LEA have firewall in place

Though will be looking for a hardware firewall solution for when we eventually break away from the LEA