|
Windows Firewall is a software component of Microsoft Windows that provides firewalling and packet filtering functions. It was first included in Windows XP and Windows Server 2003. Prior to the release of Windows XP Service Pack 2 in 2004, it was known as Internet Connection Firewall. == Overview == When Windows XP was originally shipped in October 2001, it included a limited firewall called "Internet Connection Firewall". It was disabled by default due to concerns with backward compatibility, and the configuration screens were buried away in network configuration screens that many users never looked at. As a result, it was rarely used. In mid-2003, the Blaster worm attacked a large number of Windows machines, taking advantage of flaws in the RPC Windows service. Several months later, the Sasser worm did something similar. The ongoing prevalence of these worms through 2004 resulted in unpatched machines being infected within a matter of minutes.〔(Study: Unpatched PCs compromised in 20 minutes | CNET News.com )〕 Because of these incidents, as well as other criticisms that Microsoft was not being active in protecting customers from threats, Microsoft decided to significantly improve both the functionality and the interface of Windows XP's built-in firewall, rebrand it as Windows Firewall, and switched it on by default since Windows XP SP2. One of three profiles is activated automatically for each network interface:〔(【引用サイトリンク】url=http://technet.microsoft.com/en-us/library/cc753545(v=WS.10).aspx )〕 *''Public'' assumes that the network is shared with the World and is the most restrictive profile. *''Private'' assumes that the network is isolated from the Internet and allows more inbound connections than ''public''. A network is never assumed to be ''private'' unless designated as such by a local administrator. *''Domain'' profile is the least restrictive. It allows more inbound connections to allow for file sharing etc. The ''domain'' profile is selected automatically when connected to a network with a domain trusted by the local computer. Security log capabilities are included, which can record IP addresses and other data relating to connections originating from the home or office network or the Internet. It can record both dropped packets and successful connections. This can be used, for instance, to track every time a computer on the network connects to a website. This security log is not enabled by default; the administrator must enable it. Windows Firewall can be controlled/configured through a COM object-oriented API, scriptable through the netsh command,〔(【引用サイトリンク】url=http://technet.microsoft.com/en-us/library/bb490617.aspx )〕 through the GUI administration tool〔(【引用サイトリンク】url=http://technet.microsoft.com/en-us/library/dd448573(v=WS.10).aspx )〕 or centrally through group policies.〔(【引用サイトリンク】url=http://technet.microsoft.com/en-us/library/bb490626.aspx )〕 All features are available regardless of how it is configured. 抄文引用元・出典: フリー百科事典『 ウィキペディア（Wikipedia）』 ■ウィキペディアで「Windows Firewall」の詳細全文を読む スポンサード リンク
|