Explain the new features of Firewall under windows7

Firewall, maybe everyone is still strange, but once you see its Chinese name firewall, I believe everyone is familiar with it. This is a way to ensure network security. Firewalls can be installed in a separate router to filter unwanted packets, or they can be installed on routers and hosts for greater network security. Since Windows XP first integrated the firewall, MS has been continuously improving the firewall in subsequent versions of Windows. In this article, we'll look at Windows Firewall in Windows 7 and show you how to configure Firewall for a multi-action firewall policy.

The Evolution of Windows Firewall

The firewall in Windows XP is a simple, primary only protection of incoming messages, blocking any software that is not initiated by you to initiate inbound connections - it is It is turned off by default. After SP2, it is started by default and can be configured by the administrator through Group Policy. Vista Firewall is built on a new Windows Filtering Platform (WFP, Windows Filtering Platform) and adds new filtering outreach information through the Advanced Security MMC embedded snap-in. In Windows 7, MS made further fine-tuning of the firewall to make it more usable, especially for mobile computers, and added support for multi-function firewall policies.

Introduction to Windows 7 Firewall

Like Vista, you can configure the Windows 7 firewall by accessing the Control Panel program. Unlike Vista, you can also perform advanced configuration (including configuration of outbound connection filters) by accessing the control panel instead of having to create a blank MMC and join the embedded snap-in. Just click on the advanced configuration option in the left panel.

More Network Configurations

Vista firewall allows you to choose whether to be on a public grid or a private network, and in Windows 7 you have three choices - public network, home Network, office network. The latter two options are the refinement of the private network.

If you choose the "Home Network" option, you will be able to create a "family group". In this environment, "network discovery" will start automatically, you will be able to see other computers and devices on the network, and they will also be able to see your computer. Computers belonging to the “family group” can share pictures, music, videos, document libraries, and hardware devices such as printers. If you have folders that you don't want to share in the document library, you can also exclude them.

If you choose "Work Network", "Network Discovery" will also start automatically, but you will not be able to create or join the "family group". If your computer is joined to a Windows domain (via Control Panel - System and Security - System - Advanced System Configuration - Computer Name tab) and verified by DC, the firewall will automatically recognize the network type as the domain environment network.

And the "public network" type is the appropriate choice when you are in the airport, hotel, cafe or use the mobile broadband network to connect to the public wi-fi network, "network discovery" will be turned off by default. So that computers on other networks will not discover your shares and you will not be able to create or join the "family group".

In all network modes, Windows 7 Firewall will block any connection sent to applications that are not whitelisted by default. Windows 7 allows you to configure different network types separately.

Multi-Action Firewall Policy

In Vista, although you have two profiles for public and private networks, only one will work for a specified amount of time. So if your computer happens to connect two different networks at the same time, then you have to be unlucky. The most restrictive configuration file will be used by the user to all connections, which means that you may not be able to do what you want in the local (private) network, because you are operating under the rules on the public network. In Windows 7 (and Server 2008 R2), different profiles can be used on different network adapters. That is to say, the network connection between the private networks is governed by the private network rules, and the traffic between the public networks applies the public network rules.

It's the little things that don't stand out.

In many cases, better usability often depends on small changes, MS listens to users' opinions and some "not conspicuous" And it works on small things & rdquo; joined the Windows 7 firewall. For example, when you create a firewall rule in Vista, you must list each IP address and port separately. Now you only need to specify a range, so the time spent on performing general management tasks is greatly reduced.

You can also create Connection Security Rules in the firewall console to specify which ports or protocols have the need to use IPsec without having to use the netsh command. For those who like the GUI, this is A more convenient improvement.

Connection Security Rules also supports dynamic encryption. This means that if the server receives an unencrypted (but verified) message from the guest, the security association will request encryption through the negotiated "running" to establish a more secure communication.

Configuring the configuration file in “Advanced Settings 

Using the “Advanced Settings&Control Panel, you can set the configuration file for each network type.

For configuration files, you can do the following:

* Turn on/off the firewall

* (block, block all connections or allow) inbound connections

* (Allow or Intercept) Outbound Connections

* (Is not notified if a program is blocked) Notification Display

* Allow unicast to respond to multicast or broadcast

* Allows local administrators to create and apply local firewall rules in addition to Group Policy firewall rules

In the world of networks, traffic packets that are filtered by firewalls are the ones that carry communication data. A security measure on the Internet that protects information, prevents intrusions, or protects users from critical systems. Some networks connect to the Internet through firewall machines.