Restrict or restore network access using Windows Firewall policies.
Description
Create a backup of your current firewall policy and restrict network access or restore original configuration from a firewall policy backup file.
Script Disable Device Network Isolation
- Version 1.0.0.0 – Initial release
Script Description
Imports backup of Windows Firewall policy from location %ProgramData%\Nexthink\RA_Firewall. Once completed, campaign is called to inform user about enforced restriction. Script is developed for Windows 7 and 10.
Execution context and suggested scheduling
Run the script as local system. The script should be executed manually.
A timeout of 120 seconds is recommended.
Parameters
| ID | Label | Description |
|---|---|---|
| 1 | Campaign Id | UID of the campaign to be presented after completion of the script |
Outputs
None.
Further Information
The Windows Firewall restore will only work if the Remote Action ‘Enable Device Isolation’ was run previously and it created a backup file on %ProgramData%\Nexthink\RA_Firewall.
Restrictions
- Network restore will not work as intended if organisation uses Group Policy to control Windows Firewall, or Firewall backup file was removed.
- Network restore will not work as intended if organisation uses a third party solution to control Windows Firewall.
Script Enable Device Network Isolation
- Version 1.0.1.0 – Code refactoring, fixed error with multiple script re-runs on the same device, changed logic to follow atomic operations rule
- Version 1.0.0.0 – Initial release
Script Description
Creates a backup of current Windows Firewall policy in location %ProgramData%\Nexthink\RA_Firewall, enables Windows Firewall and configures to block any connection attempt except for required by Nexthink Collector. Once enforced, campaign is called to inform user about enforced restriction. Script is developed for Windows 7 and 10.
Execution context and suggested scheduling
Run the script as local system. The script should be executed manually.
A timeout of 120 seconds is recommended.
Parameters
| ID | Label | Description |
|---|---|---|
| 1 | Campaign Id | UID of the campaign to be presented after completion of the script |
Outputs
None.
Further Information
Firewall configuration can be restored from backup file using Remote Action ‘Disable Device Network Isolation’, or manually using account with elevated privileges.
Restrictions
- Network isolation will not work as intended if organisation uses Group Policy to control Windows Firewall.
- Network isolation will not work as intended if organisation uses a third party solution to control Windows Firewall.
Content
Campaigns
Remote Actions
Required Modules
Nexthink Act
Nexthink Engage
Platforms
Windows
Compatibility
V6.14 and later
