Thread: Configuring the Windows Firewall in Windows XP SP2

Windows XP SP2 comes with a fixed firewall aspect that helps create your system less susceptible to attack by outside users or by malicious software, like viruses. It is installed automatically when you install SP2. There are methods to change settings of firewall to work around potential things that you may not want blocked from PC. You can also turn it off but it is not suggested unless you have some other firewall solution.

Firewall is PC software or hardware that limits information that comes to PC from other PCs on internet and permits you to control data coming in and out of PC. It tests information or traffic coming from internet or your network and then either permits or denies it, based on your firewall settings. A firewall also gives protection against people or programs, containing viruses and worms that attempt to attach to PC with intent to cause damage.

For starting Windows Firewall you can go to start, settings, Control Panel and double tick Windows Firewall icon. Or go to Start and then run and type wscui.cpl to open Windows Security Center and then access firewall from there.



As you can notice here you have choices to turn on firewall or off with permit or deny exceptions. Exceptions are rules that permit particular kinds of user defined traffic into your PC.



You can notice that particular programs are permitted to pass traffic to and from PC. You can also add programs not on list or open ports that wanted by certain applications.

You obtain a message from firewall asking you if you want to block or unblock a connection. If you select to unblock connection, Windows Firewall makes an exception so that firewall won't prompt you when that program wants to get information in future.

Advanced tab permits for more configuration of firewall.



It will permit you to modify settings like which network connection firewall will be utilized on. Most users will only have their one main internet or network connection. You can also enable logging from this area. There are the following choices for logging:

To allow logging of ineffective inbound connection tries, choose Log dropped packets check box.

To allow logging of effective outbound connections, choose Log successful connections check box.

Below Log File Options you can modify name and place of firewall log.
Security logging is not allowed by default.

You can also select to have PCs on your network share error and position information using ICMP.

Remember that Firewall does not notice or disable PC viruses and worms if they are there on PC, stop you from opening e-mail with unsafe attachments or block spam or unwanted e-mail. Thus you want to be cautious and apply virus protection software and watch for those odd e-mails.