{"id":30983,"date":"2026-05-09T07:23:01","date_gmt":"2026-05-09T07:23:01","guid":{"rendered":"https:\/\/endusersupports.com\/?p=30983"},"modified":"2026-06-06T11:28:59","modified_gmt":"2026-06-06T11:28:59","slug":"how-to-deploy-firewall-rule-from-intune","status":"publish","type":"post","link":"https:\/\/endusersupports.com\/index.php\/2026\/05\/09\/how-to-deploy-firewall-rule-from-intune\/","title":{"rendered":"How to deploy Windows Firewall rule in Defender for Endpoint."},"content":{"rendered":"\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t

How to deploy Firewall rule from Intune<\/b><\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t

\n\t\t\t\t\t\t
\n\t\t\t\t\t
\n\t\t\t
\n\t\t\t\t\t\t
\n\t\t\t\t
\n\t\t\t\t\t\t\t\t\t
Windows Firewall Rules<\/strong><\/div>
\u00a0 \u00a0 Windows Firewall enables administrators to create detailed, granular firewall rules. These rules can specify ports, protocols, applications, and network locations to control which traffic is allowed or blocked. This level of customization helps ensure only authorized network communications occur on the device.<\/div>
\u00a0<\/div>
Types of Windows Firewall Rules<\/h5>
1. Inbound Rules<\/strong><\/h6>
  • Control traffic entering a device<\/li>
  • Typically used to block unsolicited access<\/li>
  • Common for servers, but equally important on client systems<\/li><\/ul>
    2. Outbound Rules<\/strong><\/h6>
    • Govern what traffic leaves the device<\/li>
    • Useful for preventing unauthorized data exfiltration or unwanted applications communicating externally<\/li><\/ul>
      3. Connection Security Rules<\/strong><\/h6>
      • Specify authentication or encryption (IPsec) requirements for secure communication<\/li><\/ul>
        Elements of a Firewall Rule<\/h5>

        The main elements of a Windows Firewall Rule in Intune<\/strong> are:<\/p>

        1. Name<\/strong><\/p>

          • Identifies the firewall rule.<\/li>
          • Example: Allow RDP Access<\/code><\/li><\/ul><\/li>

          • Description<\/strong><\/p>

            • Optional explanation of the rule purpose.<\/li><\/ul><\/li>

            • Enabled\/Disabled<\/strong><\/p>

              • Determines whether the rule is active.<\/li><\/ul><\/li>

              • Direction<\/strong><\/p>

                • Defines traffic flow:
                  • Inbound<\/strong> \u2192 incoming traffic<\/li>
                  • Outbound<\/strong> \u2192 outgoing traffic<\/li><\/ul><\/li><\/ul><\/li>

                  • Action<\/strong><\/p>

                    • What the firewall should do:
                      • Allow<\/strong><\/li>
                      • Block<\/strong><\/li><\/ul><\/li><\/ul><\/li>

                      • Protocol<\/strong><\/p>

                        • Type of network protocol:
                          • TCP<\/li>
                          • UDP<\/li>
                          • ICMP<\/li>
                          • Any<\/li><\/ul><\/li><\/ul><\/li>

                          • Local Port<\/strong><\/p>

                            • Port on the local device.<\/li>
                            • Example: 3389<\/code> for RDP.<\/li><\/ul><\/li>

                            • Remote Port<\/strong><\/p>

                              • Port used by the remote system.<\/li><\/ul><\/li>

                              • Local Address<\/strong><\/p>

                                • IP address\/range on the local device.<\/li><\/ul><\/li>

                                • Remote Address<\/strong><\/p><\/li><\/ol>

                                  • Source or destination IP allowed\/blocked.<\/li><\/ul>
                                    1. Application\/File Path<\/strong><\/li><\/ol>
                                      • Specific app the rule applies to.<\/li>
                                      • Example:
                                        C:\\Program Files\\App\\App.exe<\/span><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div><\/div>Network Profiles<\/strong><\/li><\/ul>
                                        • Determines where the rule applies:
                                          • Domain<\/li>
                                          • Private<\/li>
                                          • Public<\/li><\/ul><\/li><\/ul>
                                            1. Interface Types<\/strong><\/li><\/ol>
                                              • Network adapter type:
                                                • LAN<\/li>
                                                • Wireless<\/li>
                                                • Remote Access<\/li>
                                                • All<\/li><\/ul><\/li><\/ul>
                                                  1. Edge Traversal<\/strong><\/li><\/ol>
                                                    • Controls whether traffic can pass through NAT\/firewall edge devices.<\/li><\/ul>
                                                      1. User\/Device Scope<\/strong><\/li><\/ol>
                                                        • Limits rule to specific users or devices.<\/li><\/ul>
                                                          1. Security Settings<\/strong><\/li><\/ol>
                                                            • Can require authentication or encryption.<\/li><\/ul>
                                                              Steps to deploy Firewall Rules<\/h6><\/div>
                                                              1. Login to Intune console and click on Endpoint Security then click on Create Policy.<\/strong><\/li><\/ol>

                                                                \"\"<\/p>

                                                                Select the Platform as Windows\u00a0<\/strong>and Profile “Windows Firewall Rules”<\/strong><\/p>

                                                                \"\"<\/p>

                                                                Fill the Firewall rule and description.<\/p>

                                                                \"\"<\/p>

                                                                Click on Add<\/strong><\/p>

                                                                \"\"<\/p>

                                                                Fill the Rule Name and click on additional settings<\/p>

                                                                \"\"<\/p>

                                                                Fill all the required details and click on Save<\/strong><\/p>

                                                                \"\"<\/p>

                                                                Add Scope Tag is needed then click on Next<\/p>

                                                                \"\"<\/p>

                                                                Select the group name where want to apply the policy.<\/p>

                                                                \"\"<\/p>

                                                                Now validate all the settings and click on create.<\/p>

                                                                \"\"<\/p><\/div>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"

                                                                How to deploy Firewall rule from Intune Windows Firewall Rules\u00a0 \u00a0 Windows Firewall enables administrators to create detailed, granular firewall rules. These rules can specify ports, protocols, applications, and network locations to control which traffic is allowed or blocked. This level of customization helps ensure only authorized network communications occur on the device.\u00a0 Types of […]<\/p>\n","protected":false},"author":1,"featured_media":31039,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"footnotes":""},"categories":[19],"tags":[],"class_list":["post-30983","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-defender-for-endpoint"],"views":14,"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/posts\/30983","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/comments?post=30983"}],"version-history":[{"count":5,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/posts\/30983\/revisions"}],"predecessor-version":[{"id":31101,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/posts\/30983\/revisions\/31101"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/media\/31039"}],"wp:attachment":[{"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/media?parent=30983"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/categories?post=30983"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/endusersupports.com\/index.php\/wp-json\/wp\/v2\/tags?post=30983"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}