Forum Discussion

AhmedSHMK's avatar
AhmedSHMK
Brass Contributor
Dec 04, 2024

Hotspot through Windows Defender Firewall

I would like to know ALL ports and protocols, services, etc... that need to be whitelisted for hotspot to work with windows defender firewall.
Or otherwise the baseline/recommended procedure
I have tested to enable the below so far:

Inbound/Outbound:

UDP:67,68,53, 5355
TCP:443,80, 53
ICMP4/6: protocols 1/58 Types and codes: 0/8
Services: icssvc


I still get drop events here and there in Windows Defender firewall logs for ports 80/ICMP, etc......


Any Idea what could be the reason and what is the best way to set this up to allow hotspot access from the device.

2 Replies

  • Required Ports and Protocols

    Inbound/Outbound Ports

    • DHCP (Dynamic Host Configuration Protocol):
      • UDP 67, 68 (for device IP address assignment).
    • DNS (Domain Name System):
      • UDP 53 and TCP 53 (for resolving domain names).
    • Web Traffic:
      • TCP 80, 443 (for HTTP/HTTPS traffic).
    • Multicast DNS (mDNS):
      • UDP 5355 (for name resolution in local networks).

    ICMP (Internet Control Message Protocol)

    • ICMPv4 and ICMPv6:
      • Protocol 1 (ICMPv4) and 58 (ICMPv6).
      • Types and Codes:
        • Echo Request (Type 8), Echo Reply (Type 0).
        • Router Solicitation and Advertisement for IPv6 (Types 133, 134).

    Additional Ports

    • NetBIOS (for local name resolution):
      • UDP 137, 138; TCP 139.
    • WINS (Windows Internet Name Service):
      • TCP/UDP 445.
    • Routing and Remote Access (RRAS):
      • UDP 1701, TCP 1723.
    • AhmedSHMK's avatar
      AhmedSHMK
      Brass Contributor

      Does not seem to work as far as Intune is concerned. Wondering what I am missing, Maybe Rules are mis configured?

Resources