Windows XP SP2 Firewall

[David Hendel]

Is there anyway to allow MBSA to scan Windows XP machines without turning
off the firewall each time a scan is desired? I read something about a
hotfix that is needed, but to get that, I need to contact Microsoft and
request it. Are other people having the same problem or is it just my
network?

[Imer Satz]

You can add program exception %WINDIR%\SYSTEM32\dllhost.exe to Windows
Firewall. There's a group policy for this
in Administrative Templates | Networks | Network Connections | Windows
Firewall.

"David Hendel" <da...@mail.lomancsi.com> wrote in message
news:OmAIaVFl...@TK2MSFTNGP10.phx.gbl...

[pauly [MSFT]]

Details on setting up to scan through a firewall are discussed in the MBSA
FAQ:

http://www.microsoft.com/technet/security/tools/mbsa2/qa.mspx

Under the "Initial Configuration" section look for this specific question:

Q. How can I scan a computer that is protected by a firewall?

Paul Hayes, MCSE
Product Support Services
Microsoft Corporation
pa...@online.microsoft.com

=========

This posting is provided "AS IS" with no warranties, and confers no rights.

Windows XP Security Homepage:
http://www.microsoft.com/windowsxp/security/default.asp

Windows 2000 Security Homepage:
http://www.microsoft.com/windows2000/security/default.asp

Top 10 Windows Newsgroups Security Questions:
http://www.microsoft.com/technet/newsgroups/default.asp?url=/technet/newsgro
ups/nodepages/sectop10.asp

=========

[Imer Satz]

The program exception is the alternative to the hotfix, right? Otherwise it
won't work, even with the relevant services running and ports opened.

"pauly [MSFT]" <pa...@online.microsoft.com> wrote in message
news:g$$LB7EmF...@TK2MSFTNGXA01.phx.gbl...

[Nelson Araujo [MSFT], CISSP, MCAD]

If you have neither the hotfix nor the exception, the port will not be
opened for remote connections. It will be effectively blocked (that's why I
do not consider really opened).
--
Regards,

Nelson Araujo, CISSP, MCAD
Software Development Engineer
Microsoft Corporation

This posting is provided "AS IS" with no warranties, and confers no rights.

"Imer Satz" <imer...@comcaaaaaaaaast.net> wrote in message
news:%23P$JmRRmF...@tk2msftngp13.phx.gbl...