![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/q-for-powertip.jpg\")
Hey, Scripting Guy!<\/p>\nSummary<\/b>: Use Windows PowerShell to enable, disable, and configure firewall rules in Windows Server 2012 R2.<\/p>\n
Hey, Scripting Guy!<\/p>\n
I see there are some new Windows PowerShell cmdlets for managing the built-in Windows Server 2012 R2 firewall. Could you lend a friend a hand and give me some help in learning how to use them?<\/p>\n
—JD<\/p>\n
![\"Hey,](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/a-for-powertip.jpg\")
Hello JD,<\/p>\n
Honorary Scripting Guy, Sean Kearney, is here, delving further into the wonderful world of Windows PowerShell and the new network cmdlets. This is the second part in a series called Windows PowerShell Network Week. You also might enjoy reading Windows Server 2012 R2 Network Cmdlets: Part 1<\/a>.<\/p>\n Lend a hand? More than happy to! If there is anything I can do to help take away some stress from a fellow IT pro through Windows PowerShell, I’m quite happy to oblige.<\/p>\n So first, let’s do something fairly simple. We’ll pull up a list of the firewall rules with the Get-NetFirewallRule<\/b> cmdlet:<\/p>\n Get-NetFirewallRule<\/p>\n ….and as I watch twelve hundred lines of raw data fly by, I realize that wasn’t such a bright idea. So we’ll pipe the output to Format-Table<\/b> and make this a bit more viewable:<\/p>\n Get-NetFirewallRule | Format-Table<\/p>\n I initially decided to filter on only those that were Enabled<\/b>. But seeing True and False in the output, I “assumed” it was Boolean. So I tried this line:<\/p>\n Get-NetFirewallRule | Where { $_.Enabled –eq $TRUE }<\/p>\n As you can see, that didn’t work very well. So turn the brain back on and run the output through Get-Member<\/b> to see what the output actually is. I gave this a quick shot. Perhaps a string with the word True<\/b>? Naaaaaahhhhh…<\/p>\n Get-NetFirewallRule | Where { $_.Enabled –eq ‘TRUE’ }<\/p>\n Victory!<\/p>\n So how about getting those rules grouped by type? We have Domain<\/b>, Public<\/b>, and Private<\/b> profiles. How would you know if somebody created a custom profile? We can access that information with the Get-NetFirewallProfile<\/b> cmdlet:<\/p>\n Get-NetFirewallProfile | Format-Table<\/p>\n We can even take this and filter on only Private<\/b> and show the firewall rules within that criteria:<\/p>\n Get-NetFirewallProfile –name ‘Private’ | Get-NetfirewallRule<\/p>\n But working with the firewall isn’t only about if auditing has been enabled (although that is certainly handy to know). Sometimes you have to quickly enable some built in firewall rules. For example, if your server running Hyper-V wasn’t enabled, you could first find all the rules based on Hyper-V:<\/p>\n Get-NetFirewallRule –displaygroup *Hyper-V*<\/p>\n This would show all rules within that DisplayGroup<\/b> where Hyper-V<\/b> was anywhere in the name. If you want to ensure those rules were enabled in general, you could pipe them to the Set-NetFirewallRule<\/b> cmdlet:<\/p>\n Get-NetFirewallRule –displaygroup *Hyper-V* | Set-NetFirewallRule –enabled True<\/p>\n Now here’s why I love Windows PowerShell for working with the firewall. Netsh.exe worked. But Windows PowerShell works EASILY!<\/p>\n Here’s one task I am forever doing computers running SQL Server after an installation because Port 1433 needs to be opened in my labs. I used to go into the GUI and “clickety clickety clickety…oops…clickety clickety…” But in Windows Server 2012 R2, I can simply use the Net-NetFirewallRule<\/b> cmdlet.<\/p>\n We’re going to enable Port 1433 as an inbound rule, and name it SQL Inbound<\/b>. Don’t blink because it will be done before you know it.<\/p>\n New-NetFirewallRule –Rule ‘Sql Inbound’ –Displayname ‘Sql Inbound’ –protocol TCP –localport 1433 –enabled True<\/p>\n This was cool. But of course, I can easily disable it by doing this:<\/p>\n Get-NetFirewallRule ‘SQL Inbound’ | Disable-NetFirewallRule<\/p>\n I could even easily remove it in this manner:<\/p>\n Get-NetFirewallRule ‘SQL Inbound’ | Remove-NetFirewallRule<\/p>\n Let’s imagine a scenario where the rule exists, but you don’t know the name. I would say that’s more typical if you’re a consultant walking in. Somebody says, “Show me any firewall rules that exist that enable Port 1433, and do it quickly!”<\/p>\n If you run the Get-NetFirewallPortFilter<\/b> cmdlet, you can see all of the ports that are already defined in the Windows Server 2012 R2 firewall:<\/p>\n Get-NetFirewallPortFilter<\/p>\n You can take this output, and filter it down to what you want:<\/p>\n Get-NetFirewallPortFilter –Protocol TCP | Where { $_.localport –eq ‘1433’ }<\/p>\n Then pipe that into the Get-NetFirewallRule<\/b> cmdlet:<\/p>\n Get-NetFirewallPortFilter –Protocol TCP | Where { $_.localport –eq ‘1433’ } | Get-NetFirewallRule<\/p>\n Now you’re cooking!<\/p>\n Pop back in tomorrow, JD, and I’ll throw more hot cmdlets on the grill!<\/p>\n I invite you to follow The Scripting Guys on Twitter<\/a> and Facebook<\/a>. If you have any questions, send an email to The Scripting Guys at scripter@microsoft.com<\/a>, or post your questions on the Official Scripting Guys Forum<\/a>. See you tomorrow. Until then remember eat your cmdlets each and every day with a taste dash of creativity.<\/p>\n Sean Kearney<\/b>, Windows PowerShell MVP, Honorary Scripting Guy<\/p>\n","protected":false},"excerpt":{"rendered":" Summary: Use Windows PowerShell to enable, disable, and configure firewall rules in Windows Server 2012 R2. Hey, Scripting Guy! I see there are some new Windows PowerShell cmdlets for managing the built-in Windows Server 2012 R2 firewall. Could you lend a friend a hand and give me some help in learning how to use them? —JD Hello JD, Honorary […]<\/p>\n","protected":false},"author":596,"featured_media":87096,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_acf_changed":false,"footnotes":""},"categories":[1],"tags":[56,37,154,45],"class_list":["post-1647","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-scripting","tag-guest-blogger","tag-networking","tag-sean-kearney","tag-windows-powershell"],"acf":[],"blog_post_summary":" Summary: Use Windows PowerShell to enable, disable, and configure firewall rules in Windows Server 2012 R2. Hey, Scripting Guy! I see there are some new Windows PowerShell cmdlets for managing the built-in Windows Server 2012 R2 firewall. Could you lend a friend a hand and give me some help in learning how to use them? —JD Hello JD, Honorary […]<\/p>\n","_links":{"self":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/1647","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/users\/596"}],"replies":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/comments?post=1647"}],"version-history":[{"count":0,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/posts\/1647\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media\/87096"}],"wp:attachment":[{"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/media?parent=1647"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/categories?post=1647"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/devblogs.microsoft.com\/scripting\/wp-json\/wp\/v2\/tags?post=1647"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}![\"Image](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/2630.1.png\" "\\"Image")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/5518.2.png\" "\\"Image")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/7506.3.png\" "\\"Image")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/1643.4.png\" "\\"Image")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/5773.5.png\" "\\"Image")
<\/a><\/p>\n![\"Image](\"https:\/\/devblogs.microsoft.com\/wp-content\/uploads\/sites\/29\/2019\/02\/3125.6.png\" "\\"Image")
<\/a><\/p>\n