Comments on: Windows Firewall behind a network domain

By: jaideepkhanduja

jaideepkhanduja — Mon, 28 Jul 2008 06:34:58 +0000

Are you using a 3rd party security solution along with the windows firewall enabled on the system, if that is the case, the two firewalls are conflicting and hence this issue. Since the function of firewall is well being done by the 3rd party firewall, disabling windows firewall will not hurt any PCs sentiments but enhance the performance and user will not have to encounter abrupt ‘failure of patch update’ messages.

By: labnuke99

labnuke99 — Thu, 24 Jul 2008 11:33:34 +0000

Sounds like patch distribution is not working well if the firewall has to be disabled for updates. I would suggest that the IT security group needs to rethink their distribution method and find a more effective way of handing out updates. Microsoft’s WSUS or Systems Center Configuration Manager should not require the firewall to be disabled. The firewall should be configured with the appropriate rules to permit updates from authorized sources.

By: jam

jam — Thu, 24 Jul 2008 09:09:44 +0000

Thanks for the swift responce. As our company regularly rolls out patches, updates,etc it seems the windows firewall has the effect of blocking the patch from uploading. The only way around this is to turn the firewall off and as updates are rolled out as and when the consensus was to leave the firewall turned off. Would this be considered as bad practice?