Restrict or restore network access using Windows Firewall policies.
Description
Create a backup of your current firewall policy and restrict network access or restore original configuration from a firewall policy backup file.
Script Disable Device Network Isolation
- Version 1.0.0.0 – Initial release
Script Description
Imports backup of Windows Firewall policy from location %ProgramData%\Nexthink\RA_Firewall. Once completed, campaign is called to inform user about enforced restriction. Script is developed for Windows 7 and 10.
Execution context and suggested scheduling
Run the script as local system. The script should be executed manually.
Parameters
| ID | Label | Description |
|---|---|---|
| 1 | Campaign Id | UID of the campaign to be presented after completion of the script |
Outputs
None.
Further Information
Network restore will not work if organisation uses Group Policy to control Windows Firewall, or Firewall backup file was removed.
Script Enable Device Network Isolation
- Version 1.0.1.0 – Code refactoring, fixed error with multiple script re-runs on the same device, changed logic to follow atomic operations rule
- Version 1.0.0.0 – Initial release
Script Description
Creates a backup of current Windows Firewall policy in location %ProgramData%\Nexthink\RA_Firewall, enables Windows Firewall and configures to block any connection attempt except for required by Nexthink Collector. Once enforced, campaign is called to inform user about enforced restriction. Script is developed for Windows 7 and 10.
Execution context and suggested scheduling
Run the script as local system. The script should be executed manually.
Parameters
| ID | Label | Description |
|---|---|---|
| 1 | Campaign Id | UID of the campaign to be presented after completion of the script |
Outputs
None.
Further Information
Network isolation will not work if organisation uses Group Policy to control Windows Firewall, or uses third party solution to control endpoint connection.
Firewall configuration can be restored from backup file using Remote Action ‘Disable Device Network Isolation’, or manually using account with elevated privileges.
Content
Campaigns
Remote Actions
Required Modules
Nexthink Act
Nexthink Engage
Platforms
Windows
Compatibility
V6.14 and later
