-: In this video, I'm going to show you how to configure 2 2
the Windows firewall and the Mac firewall, 3 3
so whichever system you're using, you'll know how to do it. 4 4
Let's start with the Windows firewall. 5 5
We're going to use the Windows Defender Firewall 6 6
with Advanced Security. 7 7
To load this up, simply go down to your Windows key 8 8
or your start menu, scroll all the way down 9 9
to where you see Windows Administrative Tools, 10 10
and then, scroll down again, once you click on that, 11 11
and you will find the Windows Defender Firewall 12 12
with Advanced Security. 13 13
Once you click on that, it will open. 14 14
From here, you can create all of the policies you want, 15 15
setting up inbound rules, outbound rules, 16 16
monitoring it, et cetera. 17 17
Once you have it set just the way you like, 18 18
you can actually export that policy 19 19
so you'll have it as a back-up 20 20
any time you need to go back to it. 21 21
Right now, you can see my domain profile 22 22
shows Windows Defender Firewall is off. 23 23
My private profile shows that it's on, 24 24
and my public profile shows that it's on. 25 25
What this means is that in my private network 26 26
and my public network, 27 27
I do have the Windows firewall turned on. 28 28
In the private network I don't allow 29 29
any inbound connections that don't match my rules, 30 30
but I will allow outbound that don't match my rules. 31 31
In my public network, I have it set the exact same way. 32 32
Now, if I want to change that, 33 33
I can go into my inbound rules or my outbound rules, 34 34
and decide how I want that to be done. 35 35
Let's take a look at some of these rules. 36 36
For example, we have this one here, which is SSH, 37 37
which is Secure Shell. 38 38
All of my profiles allow it, it's enabled for all of them, 39 39
it will do an allow action, 40 40
and it's going to allow any program to be run 41 41
from any address locally to any address remotely 42 42
over port 22. 43 43
That may be what you want to do, 44 44
or it may be something you want to block. 45 45
Let's go ahead and look at some other ones. 46 46
Down here, we have App Installer. 47 47
For App Installer, it's allowing it to go 48 48
any local address to any remote address, 49 49
any protocol, and any port. 50 50
This type of an any/any rule 51 51
allows it to have a lot of ability, 52 52
and so, this is going to allow a lot of things through 53 53
that we might not want. 54 54
Now, let's say you have a program 55 55
that you want to add to this. 56 56
Maybe you have a new web server on this 57 57
and you're going to run it on port 80. 58 58
You can hit new, you can then select a program, 59 59
a port, a pre-defined, or a custom. 60 60
In this case if it's a web server, 61 61
we would want to do it based on port 80. 62 62
Then, we'll click on next. 63 63
Do we want it for TCP traffic or UDP traffic? 64 64
If it's a web server, again, it's TCP. 65 65
If it's something else that might use UDP, 66 66
you could set that up. 67 67
And then, what ports is that going to work for? 68 68
For all of your local ports, or specific ports? 69 69
Well, if it's a web server, it again should be port 80, 70 70
and for secure, port 443. 71 71
Then, we can go next, we can allow that connection, 72 72
we can allow the connection if it's secure, 73 73
meaning it has to use something like 74 74
a VPN tunnel with IPSec, or we can block the connection 75 75
and not allow any web traffic in. 76 76
In our case, we want to allow the connection. 77 77
Then, we click on next, and you can see 78 78
which of those three networks it's going to apply to. 79 79
I'm going to allow all three of them 80 80
to have it applied to it, and then I'll give it a rule. 81 81
Jason's Web Server. 82 82
And that's it, now you can see that Jason's Web Server 83 83
is now going to allow traffic from any program 84 84
from any local address and any remote address 85 85
over protocol TCP, and on port 80 and 443. 86 86
Now, conversely, if I want to block things from getting in, 87 87
we would do the exact same thing, 88 88
except we would set it up as a block or a deny. 89 89
For example, I don't want to allow anybody 90 90
to do Telnet into my network, because Telnet is unsecure. 91 91
So, I would set up a new rule, 92 92
and from there, I can block anything on port 23, 93 93
which is TCP traffic on port 23, 94 94
and then, I'll hit Next, I'll block that connection, 95 95
and I'll block it for all three of those networks, 96 96
and I'm going to say Blocking Telnet. 97 97
And that's it. 98 98
You could see how easy it is to set up these rules. 99 99
If somebody says I want to block TCP on port 23 100 100
or I want to block Telnet, then you should be able to say 101 101
I want to block it from this area, 102 102
and let it go to that area. 103 103
Now, one more area of the Windows firewall 104 104
that I want to show you is down here in Monitoring. 105 105
Down in Monitoring, you can see which profile is active 106 106
as I showed you before, 107 107
but you also have access to the log file, 108 108
and if you click on that, 109 109
you'll be able to see what's currently there. 110 110
What is being logged, right now is it logging drop packets 111 111
and successful connections? 112 112
Right now, it's not, but we can change that if we wanted to. 113 113
Now, we can also view our active rules. 114 114
This again brings us back to what those inbound rules are 115 115
and seeing which ones are actually active on this profile. 116 116
So, you'll notice, anything that's all or public 117 117
is being shown here. 118 118
Anything that was just private or domain is not 119 119
because they're not active for this particular connection. 120 120
Next, we're going to configure a firewall on a Mac machine. 121 121
To do that, simply go to the apple in the upper left corner 122 122
and go to System Preferences. 123 123
From here, you're going to click Security and Privacy 124 124
and then, you're going to click on the Firewall tab. 125 125
You can notice that my firewall is on, 126 126
but I can't click any of the firewall options right now. 127 127
That's because you have to unlock it by clicking the lock 128 128
and adding your username and password for the Admin account. 129 129
Once you do that, you can turn off your firewall, 130 130
or you can turn on your firewall, 131 131
and you can configure the options. 132 132
In here, you can block all incoming connections, 133 133
you can see what applications 134 134
have been allowed through the firewall. 135 135
In my case, Skype and Google Drive are allowed 136 136
to have connections into my computer. 137 137
And then, you can automatically allow built-in software, 138 138
meaning Apple software, to receive incoming connections, 139 139
things like iTunes and iMessage, 140 140
and you can automatically allow downloaded 141 141
signed software to receive incoming connections, 142 142
meaning this is software that you trust. 143 143
And finally, we have Stealth Mode. 144 144
What Stealth Mode does is it makes your firewall 145 145
not respond and not acknowledge any attempts 146 146
from somebody to ping your network. 147 147
So, if somebody is doing a ping sweep of your network, 148 148
my computer is simply not even going to answer, 149 149
so you won't know if it's up, down, or even there. 150 150
So, how do we add an application to this list 151 151
to allow incoming connections? 152 152
Well, Mac makes it fairly easy. 153 153
You click on the plus sign, you find the application, 154 154
for example, my Chess application, and then hit Add. 155 155
When you do that, it by default 156 156
is going to allow incoming connections. 157 157
Now, if I don't want that anymore, I can simply click on it 158 158
and subtract it, and it won't answer up. 159 159
As you can see, you don't have the level of fidelity 160 160
that you have on a Windows machine here in a Mac machine. 161 161
To get that level of fidelity, you'd have to use 162 162
the command line firewall tools that are provided, 163 163
such as PF or IPFW.