Windows Firewall
Windows Firewall logging and monitoring that works
Turn Windows Firewall into a detection source: configure pfirewall.log, WFP audit events 5156/5157, rule-change events 4946-4950 and forward them centrally.
Foundation
Guides tagged
#firewall
Windows Firewall
Managing Windows Firewall at scale with GPO and Intune
Run Windows Firewall policy across a fleet: how GPO and Intune rules merge, why block beats allow, disabling local merge and checking the active store.
Intermediate
Windows Firewall
Domain and server isolation with IPsec
Use IPsec connection security rules so only authenticated domain computers reach your servers: domain and server isolation, crypto choices, safe rollout.
Advanced
Windows Firewall
Windows Firewall hardening against lateral movement
Use Windows Defender Firewall as a lateral-movement control: enforce all profiles by GPO, ignore local rules, scope RDP/WinRM/SMB to management subnets and log what matters.
Foundation