> For the complete documentation index, see [llms.txt](https://eaclouddoc.eauditor.eu/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://eaclouddoc.eauditor.eu/eacloud-docs-en/features/it-management/firewall.md).

# Firewall

The firewall enables centralized management of Microsoft Defender Firewall rules on Windows computers. It allows you to permit communication for required applications and services or block connections that should not be available within the organization.

The feature operates through eAgent installed on the computer. After connecting to the server, the agent downloads the latest configuration and updates the rules on the device.

<figure><img src="https://3262380731-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fdzip3GyvGq5q5J3qckWN%2Fuploads%2FE1bbl6all9n3ct60MU95%2Fimage.png?alt=media&amp;token=3bda05b0-6fe5-4c7c-a2b1-2523c97eb6dd" alt="Lista reguł zapory sieciowej wraz ze stanem wdrożenia i parametrami konfiguracji." width="375"><figcaption><p><em>A list of firewall rules with deployment status and configuration parameters.</em></p></figcaption></figure>

### How firewall rules work

A rule defines which network traffic should be allowed or blocked on the specified computers. When creating it, you select, among other things:

* traffic direction - inbound or outbound,
* action - allow or block,
* the network profile for which the rule should apply,
* the computers on which the rule should be deployed,
* the rule status after deployment.

Rules are deployed on assigned computers regardless of whether you set them as active or inactive after creation.

### A rule for a program or for a port?

Select the rule type based on the configuration objective.

| Rule type    | When to use                                                                                                                          |
| ------------ | ------------------------------------------------------------------------------------------------------------------------------------ |
| Program rule | When you want to control communication for a specific application, for example, allow the program network connections or block them. |
| Port rule    | When you want to allow communication through a specified local port, for example, TCP 443 or UDP 3389.                               |

A program rule can apply to a specified executable file or to all programs. Selecting the **All programs** option means that the rule will cover all connections that meet the remaining configuration conditions.

### Inbound and outbound traffic

* **Inbound traffic** - connections initiated from the network to the computer, for example, an attempt to connect to a service running on the device.
* **Outbound traffic** - connections initiated by the computer to the network or the Internet, for example, application communication with a server.

### Network profiles

The rule can be assigned to one or more Windows network profiles:

* **Domain** - used when the computer is connected to the organization's domain network.
* **Private** - used on a trusted private network.
* **Public** - used on public and untrusted networks.

{% hint style="warning" %}
Before deploying a blocking rule, test it on a single computer. A misconfigured rule may restrict access to applications, services, or network resources.
{% endhint %}

### Conflicts with other configurations

Microsoft Defender Firewall behavior may also be affected by rules created locally on the computer, by GPO, Microsoft Intune, or by other administrative tools.

If the rule behaves differently than expected, check the other firewall configurations in effect on the given computer.

### FAQ

####

<details>

<summary><strong>Does the feature support other firewalls besides Microsoft Defender Firewall?</strong></summary>

No. The feature is used to manage Microsoft Defender Firewall on Windows computers.

</details>

<details>

<summary><strong>Does creating a rule immediately change the computer configuration?</strong></summary>

The rule will be applied when eAgent connects to the server and downloads the current configuration.

</details>

<details>

<summary><strong>Can I create a rule but not enable it immediately?</strong></summary>

Yes. When creating the rule, you can set it as inactive. It will be deployed to the specified computers, but it will not be enforced by the firewall until it is activated.

</details>

<details>

<summary><strong>Can one rule operate on multiple network profiles?</strong></summary>

Yes. You can specify the Domain, Private, Public profile, or multiple profiles at the same time.

</details>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter, and the optional `goal` query parameter:

```
GET https://eaclouddoc.eauditor.eu/eacloud-docs-en/features/it-management/firewall.md?ask=<question>&goal=<endgoal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is optional and describes the broader end goal you are ultimately trying to accomplish on behalf of the user. GitBook uses it to tailor the answer towards what is most useful for that goal.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.