Windows 8: System Firewall Inbound Rules

This section provides a tutorial example on how to review and modify Windows Firewall inbound rules that override the inbound-connection-blocked setting on Windows 8 system.

With Windows Firewall configured with following default settings, you should also review individual override rules on inbound connections.

Firewall state:         On (recommended)
Inbound connections:    Block (default)
Outbound connections:   Allow (default)

1. Go to "Control Panel\System and Security\Windows Firewall" and click the "Advanced Settings" link. You will see the firewall "Windows Firewall with Advanced Settings" screen.

2. Click "Inbound Rules" on the left of the screen. You will see a list of rules that override the "Inbound connections: Block (default)" global setting.

3. Review all rules. Pay attention to those with "Enabled=Yes", "Profile=All" and "Action=Allow". If you see any rule that is strange, do some research on it. If you think it's a security risk, you should disable it first and see it affects any applications you are using.

For example, I see 2 rules named as "McAfee Shared Service Host". They are all enabled on "Public" network and allowing "Any" remote computers to make inbound connection. I think these rules represent security risks to my computer. I don't any McAfee products installed on my computer. I need to disable them.

The picture below shows you the Windows Firewall inbound rules that override the "Inbound connections: Block (default)" global setting on Windows 8 system:

Windows 8 Windows Firewall Inbound Rules
Windows 8 Windows Firewall Inbound Rules

Table of Contents

 About This Windows Security Book

 Windows 8: System Security Review

Windows 8: System Security Protection

 Windows 8: System Update Status

 Windows 8: System Update Settings

 Windows 8: System Firewall Settings

 Windows 8: System Firewall Advanced Settings

Windows 8: System Firewall Inbound Rules

 Windows 8: System Firewall Outbound Rules

 Windows 8: Manage System Firewall Rules

 Windows 8: Firewall Alert on Blocked Connection

 Windows 8: Firewall Allowed Programs

 Windows 8: Action Center Security Messages

 Windows 8: Action Center Security Message Settings

 Windows 8 System Recovery

 Windows 8 Defender for Real-Time Protection

 Windows 7: System Security Review

 Windows 7: System Security Protection

 Windows 7 System Recovery

 Windows 7 Forefront Client Security

 Norton Power Eraser - Anti-Virus Scan Tool

 McAfee Virus and Malware Protection Tools

 Spybot - Spyware Blocker, Detection and Removal

 Keeping Firefox Secure

 Keeping IE (Internet Explorer) Secure

 Malware (Adware, Spyware, Trojan, Worm, and Virus)

 HijackThis - Browser Hijacker Diagnosis Tool

 IE Add-on Program Listing and Removal

 "Conduit Search" - Malware Detection and Removal

 "Tube Dimmer", "Scorpion Saver" or "Adpeak" Malware

 Malware Manual Removal Experience

 Vundo (VirtuMonde/VirtuMundo) - vtsts.dll Removal

 Trojan and Malware "Puper" Description and Removal

 VSToolbar (VSAdd-in.dll) - Description and Removal

 PWS (Password Stealer) Trojan Infection Removal

 MS08-001 Vulnerability on Windows Systems

 Antivirus System PRO

 References

 Full Version in PDF/ePUB