Built-in Personal Firewall (Windows XP/Vista)

Important Note: Some Schools and Centers manage firewalls via their own network servers. Faculty and staff should speak with their Local Support Provider (LSP) to determine if and how their firewall is being managed.

The built-in personal firewall in Microsoft Windows XP and Windows Vista helps to protect your PC from some network attacks. The firewall provides an added level of protection against malicious activity by examining and restricting network traffic to your computer. Information Systems & Computing (ISC) recommends using the built-in firewall in conjunction with other good security practices such as promptly applying Windows security patches and setting the current version of Symantec AntiVirus Corporate Edition for regular, automatic updates.

The Windows XP built-in personal firewall is commonly used with few issues at the University. If you need assistance activating your firewall or if you encounter problems with your firewall, please consult with your local support provider (LSP) as a first step. You can also refer to Microsoft's advice for manually opening ports.

Availability

The Windows XP built-in personal firewall is included with the operating system. With the release of Windows XP Service Pack 2, the firewall was significantly improved - enhancements included closing ports except when they are in use, improving the user interface for configuration, and improving application compatibility.

The built-in firewall in Windows Vista resembles the one in Windows XP Service Pack 2, with some added capabilities.

Configuration

To activate your system's firewall, complete the following steps in a user account with Administrative privileges:

• For Windows XP Service Pack 1 and below, go to the Start menu, select Settings, and then Control Panel; right-click Network Connections and select Properties; click the Advanced tab and check Protect my computer.
• For Windows XP Service Pack 2 and above, go to the Start menu, select Settings, and then Control Panel; right-click Network Connections and select Properties; click the Advanced tab and then click Settings. Here you have the option of turning the firewall on, off, or on without allowing exceptions.
• For Windows Vista, go to the Start menu, select the Control Panel, and then Security; click on "Check firewall status". This option will bring up the User Account Control, select continue to enter the Windows Firewall settings. Here you have the option of turning the firewall on, off, or on without allowing exceptions.

Support

Primary computing support is usually located in the schools, units, and residences, close to the faculty, staff, and students being served. Contact lists are available for:

• Faculty Support
• Staff Support
• Student Support

To look up your local support provider, select your University affiliation above. You may also call First Call at 215-573-4778 to request a referral if you are not sure who to contact.

Related resources

• The Penn Information Security web site.
• ISC's Windows XP and Windows Vista product pages.