Implement Windows Defender Firewall – Manage, maintain, and protect devices

You can implement Windows Defender Firewall rules and settings in Intune as follows:

1. Open Microsoft Intune admin center.
2. Navigate to Endpoint security and select Firewall.
3. In the details pane, select Create Policy.
4. On the Create a profile page, in Platform, select Windows 10, Windows 11, and Windows Server.
5. In the Profile, select Microsoft Defender Firewall, and then select Create.
6. In the Create a profile wizard, on the Basics tab, enter a Name and Description and click Next.
7. On the Configuration settings tab, configure the following settings, and click Next:
   • Firewall, which determines the fundamental state of the firewall for domain, private, and public network location profiles.
   • Auditing settings.
   • Network List Manager, which defines TLS endpoint settings.
8. Configure scope tags and assignments as needed, and then choose Create to create the profile.

You will also need to define firewall rules, as shown in Figure 3-60. Use the following procedure:

1. Open Microsoft Intune admin center.
2. Navigate to Endpoint security and select Firewall.
3. In the details pane, select Create Policy.
4. On the Create a profile page, in Platform, select Windows 10, Windows 11, and Windows Server.
5. In the Profile, select Microsoft Defender Firewall rules, and then select Create.
6. In the Create a profile wizard, on the Basics tab, enter a Name and Description and click Next.
7. On the Configuration settings tab, click Add to create and configure specific firewall rules. When you are done, click Next. When adding a rule, you must set numerous settings, including
   • State (enabled or disabled)
   • Name
   • Interface Types
   • Remote Port Ranges
   • Action (Allow or Block)
   • Protocol
8. Configure scope tags and assignments as needed, and then Create the profile.

FIGURE 3-60 Defining firewall rules
You can also create an endpoint protection configuration profile in Devices and configure the required firewall settings in the Microsoft Defender Firewall section.