windows.firewall.profile
Description
windows firewall profile entry https://docs.microsoft.com/en-us/previous-versions/windows/desktop/wfascimprov/msft-netfirewallprofile
Fields
| ID | TYPE | DESCRIPTION |
|---|---|---|
| instanceID | string | |
| name | string | name of the profile |
| enabled | int | whether the firewall is enabled on this profile |
| defaultInboundAction | int | default action for inbound traffic |
| defaultOutboundAction | int | default action for outbound traffic |
| allowInboundRules | int | if this is true, administrators will be able to create firewall rules which allow unsolicited inbound traffic to be accepted if this is false, such rules will be ignored |
| allowLocalFirewallRules | int | determines whether local firewall rules should be merged into the effective policy along with group policy settings |
| allowLocalIPsecRules | int | determines whether local IPsec rules should be merged into the effective policy along with rules from group policy |
| allowUserApps | int | whether to respect user allowed applications created in the legacy firewall |
| allowUserPorts | int | whether to respect globally opened ports created in the legacy firewall |
| allowUnicastResponseToMulticast | int | whether to allow unicast responses to multicast traffic |
| notifyOnListen | int | if true, users will be notified when an application listens on a port that is close |
| enableStealthModeForIPsec | int | whether to use stealth mode for IPsec-protected traffic |
| logMaxSizeKilobytes | int | maximum size the log file can reach before being rotated |
| logAllowed | int | whether to log allowed packets |
| logBlocked | int | whether to log blocked traffic |
| logIgnored | int | whether to log an event when rules are ignored |
| logFileName | string | lfilename in which to store the firewall log |