Skip to content

Commit d926a66

Browse files
authored
Merge pull request #10704 from MicrosoftDocs/main
Published main to live, Wednesday 5:00 PM IST, 03/26
2 parents 8e1277d + a4dc8e0 commit d926a66

File tree

1 file changed

+4
-2
lines changed
  • windows/security/operating-system-security/network-security/windows-firewall

1 file changed

+4
-2
lines changed

windows/security/operating-system-security/network-security/windows-firewall/rules.md

+4-2
Original file line numberDiff line numberDiff line change
@@ -11,15 +11,17 @@ In many cases, a first step for administrators is to customize the firewall prof
1111

1212
This article describes the concepts and recommendations for creating and managing firewall rules.
1313

14-
## Rule precedence for inbound rules
14+
## Rule precedence for inbound and outbound rules
1515

1616
In many cases, allowing specific types of inbound traffic is required for applications to function in the network. Administrators should keep the following rule precedence behaviors in mind when configuring inbound exceptions:
1717

1818
1. Explicitly defined allow rules take precedence over the default block setting
1919
1. Explicit block rules take precedence over any conflicting allow rules
2020
1. More specific rules take precedence over less specific rules, except if there are explicit block rules as mentioned in 2. For example, if the parameters of rule 1 include an IP address range, while the parameters of rule 2 include a single IP host address, rule 2 takes precedence
2121

22-
Because of 1 and 2, when designing a set of policies you should make sure that there are no other explicit block rules that could inadvertently overlap, thus preventing the traffic flow you wish to allow.
22+
Because of 1 and 2, when designing a set of policies, you should make sure that there are no other explicit block rules that could inadvertently overlap, thus preventing the traffic flow you wish to allow.
23+
24+
Outbound rules follow the same precedence behaviors.
2325

2426
> [!NOTE]
2527
> Windows Firewall doesn't support weighted, administrator-assigned rule ordering. An effective policy set with expected behaviors can be created by keeping in mind the few, consistent, and logical rule behaviors as described.

0 commit comments

Comments
 (0)