ScriptsPowershell/AjusteFirewall.ps1 at main · Null-bin/ScriptsPowershell · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
# 04-Set-Firewall.ps1
Set-NetFirewallProfile -Profile Domain,Public,Private -Enabled True
Set-NetFirewallProfile -Profile Domain,Public,Private -DefaultInboundAction Block -DefaultOutboundAction Allow
# Desabilitar regras legacy
Get-NetFirewallRule -DisplayGroup "File and Printer Sharing" | Disable-NetFirewallRule
Get-NetFirewallRule -DisplayGroup "Network Discovery" | Disable-NetFirewallRule
Get-NetFirewallRule -DisplayGroup "Remote Desktop" | Disable-NetFirewallRule
# Habilitar regras essenciais
Get-NetFirewallRule -DisplayGroup "Core Networking" | Enable-NetFirewallRule
Get-NetFirewallRule -DisplayGroup "Windows Management Instrumentation (WMI)" | Enable-Net
FirewallRule
Get-NetFirewallRule -DisplayGroup "Windows Remote Management" | Enable-NetFirewallRule
# Habilitar logging
Set-NetFirewallProfile -Profile Domain,Public,Private -LogFileName "%systemroot%\system32\LogFiles\Firewall\pfirewall.log" -LogMaxSizeKilobytes 16384 -LogAllowed True -LogBlocked True
Write-Host "Firewall configurado. Recomendado revisar regras específicas conforme necessidade."
# Recomendado configurar o Windows Defender para logging avançado.
# Recomendado configurar o Windows Firewall para logging avançado.
# --- IGNORE ---