Ask the Expert

How should a desktop firewall policy manage open ports?

Do you think that there should be a common desktop firewall policy? If so, what should it be? Should a policy incorporate a port-based firewall that blocks all inbound ports?

    Requires Free Membership to View

Yes, organizations should definitely have a standard desktop firewall policy. A good starting point is to employ the "Deny all" setting. The Windows Firewall equivalent is "Don't allow exceptions". Unless there are services on the desktop that must be accessed by other systems, there is no need to have any ports open on the standard productivity workstation. And, if you do have these services (remote administration tools, for example), allow only the bare minimum number of ports and expose them to the smallest possible subnet.

More information:

  • Visit our Firewall Learning Guide.
  • Find out who should manage the firewall.
  • This was first published in December 2006

    There are Comments. Add yours.

    TIP: Want to include a code block in your comment? Use <pre> or <code> tags around the desired text. Ex: <code>insert code</code>

    REGISTER or login:

    Forgot Password?
    By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy
    Sort by: OldestNewest

    Forgot Password?

    No problem! Submit your e-mail address below. We'll send you an email containing your password.

    Your password has been sent to: