Using the Windows Firewall

The Windows Firewall is a built-in component of both Hyper-V Server and Windows Firewall. While this tool is not as robust, secure, or powerful as high-end hardware firewalls, it is one of the better software firewalls available and is quite lightweight. It is possible to disable the functionality of the Windows Firewall, but completely disabling its service causes a number of problems. Since you're required to leave the service running, it's helpful to continue using it even when hardware firewalls are available as a low-cost part of a comprehensive defense-in-depth strategy.

Out of the box, the firewall automatically allows most remote management tools. For normal operations, it should require almost no maintenance. However, some steps can be taken to increase the protection it provides. For one thing, the default rules that enable inbound traffic are open to any source. This subject will be revisited in Chapter 5, Securing the Network, which is dedicated...