locked
How to block 445 port from windows firewall defender but skipping the c$ share? RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

    I'm blocking the 445 port from the windows firewall defender, in the inbound rules, but I'm also blocking the c$ share.

    Can anybody tell me whether it is possible to block the 445 port and at the same time let the c$ share opened?

    Thanks in advance.

    Regards.

    Monday, December 2, 2019 3:00 PM

Answers

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello droig,

    As you have probably guessed, all of the file share traffic (SMB protocol, port 445) uses port 445. If you block that, there is no way that any subset of the functionality provided by SMB will "work". That includes access to the C$ share.

    Gary

    • Marked as answer by droig Tuesday, December 3, 2019 7:44 AM
    Monday, December 2, 2019 5:09 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

     

    If you have blocked SMB/TCP 445 on the computer itself, you won't be able to browse anything via SMB on that particular computer.

     

    Best Regards,

    Farena

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by droig Tuesday, December 3, 2019 7:47 AM
    Tuesday, December 3, 2019 2:25 AM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hello droig,

    As you have probably guessed, all of the file share traffic (SMB protocol, port 445) uses port 445. If you block that, there is no way that any subset of the functionality provided by SMB will "work". That includes access to the C$ share.

    Gary

    • Marked as answer by droig Tuesday, December 3, 2019 7:44 AM
    Monday, December 2, 2019 5:09 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi,

     

    If you have blocked SMB/TCP 445 on the computer itself, you won't be able to browse anything via SMB on that particular computer.

     

    Best Regards,

    Farena

    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    • Marked as answer by droig Tuesday, December 3, 2019 7:47 AM
    Tuesday, December 3, 2019 2:25 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks a lot.

    Regards.

    • Marked as answer by droig Tuesday, December 3, 2019 7:47 AM
    • Unmarked as answer by droig Tuesday, December 3, 2019 7:47 AM
    Tuesday, December 3, 2019 7:44 AM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Thanks, I'll have to keep opened the 445 port

    we usually use the c$ shares.

    Regards.

    Tuesday, December 3, 2019 7:46 AM