Firewall

Configure Windows Defender Firewall policies through Intune endpoint security. Manage firewall profiles, default actions, and custom rules for domain, private, and public networks.

Firewall Profiles

Domain Profile

Active when connected to a corporate domain network.

Private Profile

Active on trusted private networks. Balanced security.

Public Profile

Active on untrusted public networks. Most restrictive.

Profile Settings

Custom Firewall Rules

Creating a Firewall Policy

1. Navigate to Endpoint Security then Firewall
2. Select profile type (Firewall or Firewall Rules)
3. Configure settings per network type
4. Define custom rules if needed
5. Assign to device groups

Rule Processing Priority

1. Authenticated bypass rules (highest)
2. Block connection rules
3. Allow connection rules
4. Default profile behavior (lowest)

Troubleshooting

• Application blocked — Check if app needs custom allow rule
• Policy conflict — Review overlapping policies
• Firewall not enabled — Verify policy assignment and sync

Best Practices

• Enable firewall on all profiles
• Block inbound by default
• Use application-based rules over port-based
• Enable dropped packet logging
• Test rules on pilot devices

API Reference

• GET /api/devices/security/firewall/policies — List policies
• POST /api/devices/security/firewall/policies — Create policy
• GET /api/devices/security/firewall/status — Get status
• GET /api/devices/security/firewall/rules — List rules