Copyright © 1E 2022 All Rights Reserved
Downloads
135
Endorsements
10
Components
4
Added
4 years ago
Last Updated
1 year ago
Compatibility
Client Supported - 8.1, 9.0
OS Supported - Microsoft Windows 11, 10
OS Supported - Microsoft Windows 11, 10
Description
This Product Pack provides functionality to effectively manage Firewall Rule configurations on end-user machines to strengthen end-user device security.
Key Features
- Enable or disable specified Firewall rule.
- Check if a Firewall rule has the specified action, if not then apply the specified action to the rule.
- Returns firewall rules filtered by state.
Setup
- This Product Pack contains both Rules and instructions.
- Upload this Product pack with the help of Tachyon Product Pack Deployment Tool.
- A Guaranteed State Policy named Enable Disable Firewall rule will be created.
- Guaranteed State Rules Firewall Rule Enable or Disable will be created in this policy.
- An Instruction set named Windows Firewall containing all the instructions will be created.
Usage
- Review the rule Firewall Rule Enable or Disable.
- The precondition ensures it run only on Windows devices.
- Adjust the Trigger Query or Debounce to meet your requirement.
- The Check, if RuleName is enabled or disabled on the devices, will decide if the device is compliant or not.
- Based on the compliant result a fix can remediate the device.
- Assign the Enable Disable Firewall rule Policy to a management group.
- Deploy the Enable Disable Firewall rule Policy.
- Within a period of a day or more you would start seeing the compliance reports on Windows firewall.
- We can also manually run instruction from Explorer to perform various actions or questions related to Windows firewall.
Components
1E-Explorer-TachyonCore-GetFirewallRulesFiltered
INSTRUCTION
Description
Returns firewall rules filtered by state
Readable Payload
List %ruleState% firewall rules
1E-Explorer-WindowsFirewallManagement-EnableDisableFirewallRule
INSTRUCTION
Description
Check if a FireWall rule has the specified action, if not then apply the specified action to the rule.
Readable Payload
Check if the FireWall rule %RuleName% is %EnableOrDisable% , if not then apply the action to the rule.