Windows Firewall via Group Policy

[pantscat]

Just wondering...

 

Does anyone "deploy" windows firewall settings via Group Policy and limit outgoing connections? rather than the default allow?

 

A bit of background: I'm currently trying to find ways to disable the P2P features of Spotify (it upsets my Forefront TMG firewall) and one of the most obvious ways I can see to do it is via a Windows Firewall rule. However, in order to do this I need to explicitly define all outgoing ports and I'm lazy and not sure I can be bothered.

 

Meh.

 

Maybe one to tackle on a day other than a Monday!

[themightymrp]

I use it to deploy a couple of settings, namely I allow certain ports for Sophos update to work correctly. It is a boring process though. Oh and I also enable or disable File and Print Sharing based on where the machine is - sometimes we don't want it enable

[chazzy2501]

yup i use gpo for firewall works great!

 

I limit file sharing to only my workstation, Allow ICMP echo, port exceptions for the AV software MMS and RTSPU streaming and program exceptions for the PCE software.

[themightymrp]

Ahh yes, I allow the ICMP echo's too so that I can do ping tests

[pantscat]

Ah... ok, so outgoing policies are more popular than I thought!

 

Hmm... clearly I should spend some time looking at Netstat!