Retrieve firewall settings?

Comments

3 comments

  • Brian Camp

    Should have added this with the original post, but here's a screenshot of the scan profile I made.

    0
    Comment actions Permalink
  • Shane Corellian

    Hi Brian,

    Depending on the Firewall data you need you may want to scan HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall

    There is a Scan Profile already built for this. It is called Windows Firewall Configuration. If the value you want doesn't exist there then you can copy the path you provided and just add that to this existing profile. (just a suggestion)

    Anyway, yes, there are a few ways you can access the scanned registry data.

    1. From the Registry panel the Computer window. (see attachment)
    2. From an Inventory Report

    You can also build collections based on the data in the registry although you can't view the Registry data from a Collection window. For example you could have a Collection that contains only computers that have the RemoteDesktop exception set to 1 (enabled). 

    Let's say I want to see the RemoteDesktop policy on my computers. This value exists under HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall. I use the Windows Firewall Configuration scan profile. (see attached)

    Then I build a report (see two attached files Inv-RegistryReport-FW-RD*.png)

     

    0
    Comment actions Permalink
  • Brian Camp

    Shane,

    Sorry for the delay, we've been on vacation.  This is exactly what I needed, I'm able to retrieve and view all the firewall settings I need.  Thank you for the info!

    0
    Comment actions Permalink

Please sign in to leave a comment.