Windows Firewall Adem Enes POLAT 1809630

What is Firewall? What is Firewall Windows firewall is a component of the Windows program. The first time with the current name is released as part of Windows XP service pack 2. The main purpose of Windows Firewall is to protect your computer from unwanted Internet access.

History of Firewall Windows Firewall was released in 2004 along with Windows XP service pack version 2. Windows Firewall Forerunner The Internet connection firewall was created in October 2001 as part of Windows XP and Windows Server 2003 operating systems. Problems with backwards compatibility The Internet connection firewall was normally turned off. In 2003, after the "Blaster worm" and "Sasser worm" attacks, Microsoft decided to upgrade the Internet connection firewall and rename it to a Windows firewall. Note: From Windows Vista and Windows Server 2008, the Windows Firewall can also filter outgoing traffic, integrating rules for firewall behavior and traffic protection with Internet Protocol security (IPsec). This Firewall is configured using the Windows Firewall with Advanced Security.

Architecture of Firewall Windows firewall uses several network components. Windows firewall / internet connection sharing services (Svchost.exe) Windows sockets driver (Winsock.dll) TCP / IP driver (Tcpip.sys TCpipv6.sys) Network address translation driver (Ipnat.sys)

Firewall Interface

Firewall Interfaces Windows Firewall API is a public interface that allows you to configure windows firewall. It can: Turn on and off Windows Firewall Add and remove programs from the exceptions list Add and remove TCP and UDP ports from the exceptions list Enable and disable configured system exceptions Configure ICMP Configure log files.

API Interfaces INetFwAuthorizedApplication Provides access to the properties of an application that has been authorized to open ports in the firewall. INetFwAuthorizedApplications Provides access to a collection of applications authorized to open ports in the firewall. INetFwIcmpSettings Provides access to the settings controlling ICMP packets. INetFwMgr Provides access to the firewall settings for a computer. INetFwOpenPort Provides access to the properties of a port opened in the firewall. INetFwOpenPorts Provides access to a collection of ports opened in the firewall. INetFwPolicy Provides access to a firewall policy. INetFwProfile Provides access to a firewall settings profile. INetFwRemoteAdminSettings Provides access to the settings controlling Remote Administration. INetFwService Provides access to the properties of a service that may be authorized to listen through the firewall. INetFwServices Provides access to a collection of services that may be authorized to listen through the firewall.

Firewall Networks Windows firewall can be used on any kind of network shown by Network connections like: LAN network Dial-up network VPN network

Firewall Protocols Windows Firewall provides the following protocols: IPv6 is the customization of the IPv4 header for the IPv6 package, which aims to enable IPv4 and IPv6 that support the hardware when IPv4 infrastructure is separated. AH / ESP - IP Pack Transformation with Authentication Header (AH) and Encapsulation Protection (ESP) GRE - Data encapsulation using Point-to-Point Protocol IGMP - Internet Group Management Protocol. PGM - A protocol that allows the sender to detect data loss.

Sources https://security.web.cern.ch/security/recommendations/en/how_to_secure_your_pc.shtml https://docs.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2003/cc755604(v=ws.10) https://en.wikipedia.org/wiki/Windows_Firewall