Home / Firewall and Security

🔥 Firewall and Security

Firewall configuration, disable unnecessary protocols and credential protection

🛡️ Firewall Rules

Disable Unnecessary App Rules

Disable Windows app rules powershell

netsh advfirewall firewall set rule group="Connect" new enable=no
netsh advfirewall firewall set rule group="Contact Support" new enable=no
netsh advfirewall firewall set rule group="Cortana" new enable=no
netsh advfirewall firewall set rule group="DiagTrack" new enable=no
netsh advfirewall firewall set rule group="Feedback Hub" new enable=no
netsh advfirewall firewall set rule group="Microsoft Photos" new enable=no
netsh advfirewall firewall set rule group="OneNote" new enable=no
netsh advfirewall firewall set rule group="Remote Assistance" new enable=no
netsh advfirewall firewall set rule group="Windows Spotlight" new enable=no

Block Port 445 (SMB)

Block SMB port powershell

netsh advfirewall firewall add rule name=deny445 dir=in action=block protocol=TCP localport=445

Configure Firewall Profiles

Enable firewall and disable local rules powershell

Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled True -AllowLocalFirewallRules False

🚭 Disable Network Protocols

NetBIOS

Disable NetBIOS/LMHOSTS powershell

New-ItemProperty -Force -Path "HKLM:\SYSTEM\CurrentControlSet\Services\NetBT\Parameters" -Name "EnableLMHOSTS" -PropertyType DWord -Value 0

Unnecessary Network Adapters

Disable network components powershell

# Pacer (QoS)
Disable-NetAdapterBinding -Name "*" -ComponentID "ms_pacer"

# SMB Server
Disable-NetAdapterBinding -Name "*" -ComponentID "ms_server"

# LLDP
Disable-NetAdapterBinding -Name "*" -ComponentID "ms_lldp"

# LLTD
Disable-NetAdapterBinding -Name "*" -ComponentID "ms_lltdio"
Disable-NetAdapterBinding -Name "*" -ComponentID "ms_rspndr"

IPv6

Disable IPv6 powershell

Disable-NetAdapterBinding -Name "*" -ComponentID "ms_tcpip6"
New-ItemProperty -Force -Path "HKLM:\SYSTEM\CurrentControlSet\Services\TCPIP6\Parameters" -Name "DisabledComponents" -PropertyType DWord -Value 0xFFFFFFFF

SMBv1

Disable SMBv1 in registry powershell

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" -Name SMB1 -Value 0

Disable file and printer sharing powershell

netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=no

🔐 Credential Protection

Credential Hardening

Configure token policies powershell

Set-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -Name LocalAccountTokenFilterPolicy -Value 0
Set-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -Name FilterAdministratorToken -Value 1
Set-ItemProperty HKLM:\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System -Name EnableLUA -Value 1

Cleartext Password Protection

Protect plaintext passwords powershell

Set-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest -Name UseLogonCredential -Value 0
Set-ItemProperty HKLM:\SYSTEM\CurrentControlSet\Control\Lsa -Name TokenLeakDetectDelaySecs -Value 30

⚠️

⚠️ Important

SMB: Disabling SMB may affect file sharing on local network
IPv6: Only disable if you don't use it
Firewall: Make sure you're behind a NAT router
Restart: Restart Windows to apply changes

← Windows Features Nagle Algorithm →