Windows Security · 2.4

🛡️ Windows Firewall & Windows Security

Your first line of defense against network attacks⏱ ~3 min

Windows Firewall (now called 'Windows Defender Firewall') controls which programs and ports can send or receive network traffic. It should always be ON for all network profiles.

Three Network Profiles

ProfileWhen ActiveTypical Setting
DomainConnected to a corporate/school network domainManaged by IT — don't change in competition
PrivateHome/trusted networkFirewall ON, limited inbound allowed
PublicCoffee shop, hotel, unknown networkFirewall ON, strictest rules — block most inbound

Accessing the Firewall

powershell
# Win+R → type:
wf.msc          # Windows Firewall with Advanced Security (most powerful)
firewall.cpl    # Basic firewall on/off settings
 
# Or: Windows Security → Firewall & network protection

Competition Checklist — Firewall

  • •Turn ON firewall for all three profiles — Domain, Private, Public
  • •Block inbound by default — the default 'Block (default)' inbound rule is correct; don't change it
  • •Review allowed programs — remove exceptions for programs that don't need network access
  • •Disable Remote Desktop exceptions if the scenario doesn't require remote access
  • •Never turn off the firewall — if a program says 'disable your firewall to run me', that's a red flag

Windows Security (Win+I → Privacy & Security → Windows Security)

  • •Virus & threat protection — ensure Windows Defender is enabled and up-to-date; run a Quick Scan in competition
  • •Account protection — check for Windows Hello / sign-in options
  • •App & browser control — SmartScreen should be ON for apps, files, and Edge
  • •Device security — check if Secure Boot and core isolation are available
🔒 SecurityIn competition images, Windows Defender may be intentionally disabled (a vulnerability to find). Check Virus & threat protection and re-enable real-time protection — this is often worth points.

Windows Update — Always Enable

  • •Go to Settings → Windows Update → ensure updates are enabled and not paused
  • •Click 'Check for updates' in competition — installing missing updates earns points
  • •Unpatched systems are the #1 source of known exploits in real-world attacks
🧠Quick Checkfirst try = +5 XP

How many network profiles does Windows Firewall have?

🎮 Practice what you learned
🏰
Password Fort
Build passwords that survive a brute-force siege
→🕵️
Log Analysis
Hunt attackers through real firewall & access logs
→
⭐ 0 XP🔥 0 days
Open the full interactive CyberPatriot Prep module →