Forum Discussion

marckuhn's avatar
marckuhn
Brass Contributor
Jul 31, 2021
Solved

Configure Windows 10 Firewall Rule for MS Teams In- & Outgoing

Hi guys
i need to configure in Endpoint security panel the Windows 10 Firewall. We would like to block all in- and outbound traffic. Also we will configure a rule for each app which will be allowed to communicate. For MS Teams i have issues to configure as it is installed in the userprofile.

Does anybody know how to configure that without using a Script outside the Endpoint security section?

Many thanks for your feedback
Marc
Intune
  • Rudy_Ooms_MVP's avatar
    Rudy_Ooms_MVP
    MVP
    Jul 31, 2021

    marckuhn 

     

    So far I am aware, you can't user uservariables such as %localappdata% or %username%... If you don't want to go down the scripting option..

     

    Maybe opening the port necessary ?

    TCP, Allow Ports 50000-50059
    UDP, Allow Ports 3479-3481, 50000-50059

     

    Maybe that would help 

    • marckuhn's avatar
      marckuhn
      Brass Contributor
      Aug 03, 2021
      Hi Rudy

      thanks for your response. I'm not sure if that is what we want. I'm wondering if configure to block outbound traffic in Windows Firewall is not a configuration which is used a lot.

      Do you configure it or not?

      Best regards
      Marc
      • Rudy_Ooms_MVP's avatar
        Rudy_Ooms_MVP
        MVP
        Aug 04, 2021
        We are using it to block some well known reverse shell ports and as example we also block port 21 (ftp) outgoing.

        In a blog I have written you can see for yourself the results when blocking the port 21
        So I guess its worth a try to test out on a test device? to see for yourself if it what you want?

        https://call4cloud.nl/2020/07/the-windows-firewall-rises/

Resources