Why you shouldn't just use Windows Firewall

Turn Off Windows Firewall and use something else. This video demonstrates with a trojan backdoor malware test, why you shouldn't use Windows Defender Firewall,although it comes with Microsoft Windows 10 and isn't necessarily bad. ▼ Links, Resources and Contact Information ▼
✉ Contact us for business: www.thepcsecuritychannel.com/...
🔥 Love the channel? Become a Patreon:
/ tpsc
🔥 Buy the best antivirus/security products with exclusive discounts and support this channel:
www.thepcsecuritychannel.com/buy
🔥 Join us on Discord and participate in our active community:
www.thepcsecuritychannel.com/...
▶️ See how your product performs in a Test vs Malware:
www.thepcsecuritychannel.com/...
▶️ Want to learn cybersecurity? Get started here:
www.thepcsecuritychannel.com/...

[@pcsecuritychannel]

This video shouldn't be *misinterpreted as advice not to use any firewall* especially if you're using a laptop and connecting to random Wifi networks. Also, since everyone is asking why I ran the sample in a Win 7 environment (yes, this happens the same way in Windows 8/10). The purpose here isn't to bash Windows Firewall. It is a demonstration of the problem with a security model relying on the firewall on the same system the malware is executing from a cybersecurity perspective with real backdoor example.

[@kontoname]

What the hell is this about? This setup can only work if the user you run this under has actual admin rights... and if it does then ANY solution is purely gimmick. What are you trying to teach here other than you not being aware of what an administrator is...? Please upload another video doing the same procedure but with the user being an actual user... And yes, UAC / Admin will stop this kind of bs - and if it did not (due to other exploits stacked, privilige escalation issues etc.) then ALL other solutions aside from a hardened and unexploitable (lol good luck) hardware firewall with DPI and other layers on top will not stop the threat either. So in summary your video says: basic threats will be dealt with unless you're being hacked by the FBI - and if you are... well... nothing will stop the attack. In the worst case people will just visit you, smash your teeth in and kindly ask for the password again. Get REAL.

[@Turtle_Shell]

To ensure people don’t misinterpret it, you could change the title to “Why you shouldn’t rely on Windows Firewall”

[@evigilatus]

How about using Windows Firewall Control? - binisoft.org/wfc

[@darkspace5762]

Honestly the firewall doesn't make that much differnce on a local LAN. It's more for hosts on the public internet that are being continuously scanned for vulnerabilities. You could very well disable it and it wouldn't make any difference. You are already behind a NAT firewall, your home router. And the host-based firewall in windows is designed for programs that run with administrator privilges can create exceptions for itself.

[@dktol56]

So don't use an account in the Administrators group for everyday use? Then malware running as that user won't have the elevated privileges to run netsh and compromise the Windows firewall. Am I correct on this point? Of course, an (additional) external firewall is still preferable, but on a mobile device, you have to use what you've got available.

[@rfunk727]

You should do a video on the best Firewalls available.

[@kevinm3751]

I use ESET and it has been fantastic! Not just for the OS but for email and everything that comes into the system. Worth every penny in my opinion!

[@user-qu7ug7ir5u]

Netlimiter is very satisfying.

[@GeneralProfessor]

Yes please do!

[@malwaretestingfan]

Comodo is a good choice? I used it for a while.

[@darkspace5762]

Windows is the best.

[@lev2727]

Someone clearly has a rather limited knowledge about firewalls and security in general. As an IT security guy for over 17 years this was quite painful to watch.

[@udi112]

True, no vector just payload on a simulator

[@Leokhawarizmi]

please make more videos about malware analytics techniques , and it will be much better if you make a series from beginner to advanced. your channel is really great thank you

[@MattiKoopa]

UAC was supposed to protect against that. But people kept complaining about annoying prompts so Windows made the default security level for never OSes "medium" which doesn't ask about built-in programs running with Admin priviledges. Instead they now use safe screen stuff that looks a program trying to run on up on the internet to determine if it should display an additional prompt. Basically just turn UAC to high first thing on a new PC and never have an issue like the one displayed.

[@Lopoi]

Shouldnt windows always ask you when a program tries to add a rule on the firewall?

[@unnamedchannel1237]

If uac is turned off and the user is silly enough to have their account run as admin or if the uac did pop up and they clicked yes when they initially launched the file

[@springbok4015]

Yup, UAC and exceptions to the firewall are requested.

[@Wahinies]

Yes it's a domino effect when the user runs at all times as local admin with UAC off. In this case using Windows Firewall is the *least* of security concern. Interesting walkthrough a Trojan but I dont get the point of this video and may be dangerous if viewers misconstrue this as turning WF off!

[@unnamedchannel1237]

Blokka Nokka if you have uac turned off and running as admin then it will do what it wants

[@eainen]

People usually just elevate the original malware executable without checking what it is when they run it initially. After that there's no more prompts because it has access.

[@briangullens5351]

Don’t run as a administrator. A limited user can’t change firewall settings. Thus the script won’t be able to either.

[@BreadMan434]

However, everyone with private desktops and laptops are kinda screwed. I think he used administrator to demonstrate the market consumer average when it comes to Windows usage, which are often the common home usage Windows.

[@psychcisco]

@@BreadMan434 So the title of this video, and most of his other video's should probably be "Why not to run Windows as an Administrator"

[@lordgauron]

Most of the time software installers require admin rights. They can easily do this trick then.

[@BreadMan434]

@@psychcisco then they should also have the operating system labelled. As well as installed updates and OS versions. And really, it shouldn't need to be said. Every laptop in the world is sold to automatically set up your primary account as an Administrator, and every PC is preferably set up as one. And this is primarily a problem caused by user account control, antivirus and firewall permissions. If you're currently running a non-administrator windows, I have no idea what you're doing

[@bjcanz]

I used to have deep freeze but the problem is it burns out the read and write of HDD platter disk in the long run but good against virus that overwrite the system very effective, if you know how to use it, just dont use a virtual disk as a storage, use a second physical drive,

[@nuorizon8329]

You are testing your assertion using Windows 7 32-bit, which has entered end-of-life Jan-2020 and has not been receiving any meaningful updates for quite some time. It would have been more relevant if you run this experiment on an up to date Windows 10. Then see that the assertion you make does not hold true, at least for this test.

[@spectretacitus325]

So, I've just never heard of that site until this video. It's very interesting to see what it can do. Are there any other sites of this type that you are aware of? Maybe you could do a video on such sites which you think are beneficial to people interested in cyber security. Thanks.

[@TheFPSPower]

Virus Total is THE website for these things, it was bought by google long ago and has a massive database, if there is any other website I doubt it's any more powerfull.

[@Mindflayer86]

@@TheFPSPower I am pretty sure he meant app.any.run

[@theastroquantumguy5810]

Since more and more people are running smartphone devices, I was just wondering if you could make in the future a video about Antivirus software for Android/iOS?

[@andrewseed7184]

Bitdefender free for Android

[@malwaretestingfan]

Agreed. Placed all my bets on Dr. Web being good / pretty decent as well.

[@user-bm9gw2mg3g]

@Dex4Sure well.... There was some instances were devs put malware and bypass Apple/Google protection. And don't get me started how many times ios users were attacked by hackers using exploits.

[@hdezn26]

@@user-bm9gw2mg3g Yeah and its been real bad recently for android anyways... ( it's almost like google don't give a **** ) I don't know too much on apple as I don't hear as much about them. ( side note . . I'm not a fan of Apple and their crappy broken products ... Customer: Something broke/ not working? Apple: Buy a whole new computer )

[@virtualtools_3021]

all are scams, stop downloading pirated pr0n and you won't get viruses.

[@nuNWO]

Really interesting and so well explained with the demonstration.

[@ankitminz5872]

"Download his friends and have a party on your system" 🤣 Well so what should we use?

[@advertslaxxor]

As suggested in the video, a hardware firewall is preferable, though that is pretty benign advice. A better (i.e., more possible/likely to be done, not "superior") suggestion, also in the video, is to have some other software firewall. Generally this will be bundled with some antivirus software.

[@el_tate]

Comodo firewall free, but good luck trying to find the correct download, nowadays the official web tries to spam you with "Complete Antivirus with Firewall" not the "firewall free" I am telling you.

[@borgar4357]

eltate it doesnt have official website?

[@SOF006]

@@el_tate Took me the best part of 2 seconds to find it. I googled "comodo free firewall" and got this link www.comodo.com/home/internet-security/firewall.php

[@SOF006]

@@el_tate Okay so I retract my comment slightly, but it does appear that to get the firewall you need to install the AV product as well. I wouldn't say thats too bad considering comodo AV is actually pretty good.

[@CarlosOrtiz-ht6rn]

Subscribed to your channel! You have amazing information!

[@realmtl6829]

A list of good firewalls would be nice. Also what kind of system do you use to test these? What Linux distro do you like?

[@lilstimmy6814]

Can you do a video on how to get a router level firewall? I know it would be different for each router but it would be helpful.

[@pcsecuritychannel]

Definitely I'll add it to my list after seeing the comments in this video. ;)

[@yazajin]

@@pcsecuritychannel I'm not sure if a Raspberry Pi would be useful for that, since solutions like PiHole exist for other purposes. Just a thought for the video.

[@MarkMark-sd4ej]

@@pcsecuritychannel yes bro I approve of that request too!!

[@abandonedmuse]

All routers have their own firewalls. Just read the manual and block the ports you don’t need. Anything coming in is wise unless you really need it.

[@lilstimmy6814]

@@abandonedmuse My modem router combo from my ISP is really basic and doesn't have anything like that. If I go in the setting there is nothing for firewall but my cousins they have a different ISP and they have firewall options and stuff.

[@mymediapc9521]

If you are someone who use the Windows Firewall at least in a corporate environment, one other thing you can do is use a GPO to control the Windows Firewall and tell the firewall to ignore any locally made rules. Is not a guarantee obviously but would provide some minor to moderate additional resistance to this attack. Ideally though, ya you want a hardware firewall that can actually scan into the packets and an IPS on the host that will run hashs against executables.

[@MF-le7fp]

Please consider doing a video on this particular threat against Komodo firewall. Thanks. Great channel! 👍

[@rcarter-ip8xd]

Great video, have been looking for something along these lines for sometime, also caught your video on Win11 and agree with the concerns you posed. Because of the risks of using Windows Firewall I installed Norton 360 and use that instead about five years ago. One feature I liked about Norton was the ease at which you could block out bound traffic from specific apps. And for a while I thought I had plugged most of the holes that Windows Telemetry was using. But nearly two years ago I noticed NF was not logging blocked traffic on the Window Telemetry settings I had entered, and wondered if MS had moved telemetry services deeper into the OS in order to bypass any firewall. But my knowledge doesn't take many any further than that, so I'm not sure what MS is doing now, but I do know the amount telemetry being collected has only increased. And you can't disable it any longer either. So, if you could add some suggestions on alternative firewalls, preferably hardware ones, that would allow someone to block outbound traffic, that would be great. Keep up the work and I'll share the links.

[@Crroow]

I didn't care to check what channel. I thought, hey this guy sound like Leo. Keep it up, this channel is awesome!

[@WhattEvery]

"Why you shouldn't just use Windows Firewall". Does this post also apply to [Windows 10 Firewall]?

[@DoomVik]

Im a bit lost. Does it like completely bypass UAC as well and any permissions settings? obviously if you run it as a local admin it would run rampant, but does it do the same even if you separate the user account and the local admin?

[@jugginator4390]

In theory, would UAC settings and/or running the OS on a non admin account prevent the malware from using cmd to add the rules?

[@gabrielandy9272]

yes but if u click yes on the promp the same would happen

[@vladislavkaras491]

Really great video! Thanks!

[@testhekid]

yt recommendations is giving me good stuff lately

[@M1911Original]

What's the best alternative then? How do we put a firewall at the appropriate level for protection?

[@WmTyndale]

Thank you. Right to the important point!

[@dexterman6361]

Doesn't netsh command require admin privileges?

[@Akaya3511]

Iobit Malware Fighter 8 rc just came out. Would love to see some Iobit software tests.

[@Jarrenkai]

Very informative, I am using Malwarebytes Windows Firewall Control and its pretty awesome

[@SMGJohn]

Well obviously you use an anti virus software preferably with a firewall or one that modifies the Windows one, but you are right a firewall in the router would be the better idea, some internet providers also have firewalls at their base which seems to become more and more widepsread. I would really like to see you explore more GNU Linux safety aspects etc, interesting to see which are really more secure, with or without AV.

[@lebaquette]

Doesn't f-secure use a modified windows firewall?

[@sooocheesy]

I think the point of the video was to use "security through obscurity". In other words, If you switch it up and use a different firewall the malware likely won't be written to specifically shut down that alternative firewall. If you are using common applications (MS Office)/OS (Windows)/Firewall (built-in) your system is what most malware are designed to attack.

[@TwstedTV]

@@sooocheesy People are better off just purchasing a tiny mini PC, with a cheap CPU, but not too old. and install Linux OS as the host-OS of that Tiny / Mini PC and then install OpenSense or pfSense with Saracata, and place the tiny / mini pc between the main computer and the router. You can get some pretty awesome protection.

[@zmbdog]

5:03 I really don't get this feature of virustotal. I mean, every file I drop into it ends up looking like this once it's expanded. Is everything on my system compromised?

[@eclipticrenegade2520]

Could you not modify UAC registry values for the firewall, so any firewall changes made via cmd.exe prompt UAC?

[@metehangunaydn6295]

Hello,Leo. Interesting point it is which you mentioned. But i have a question: Not only windows firewall is protecting the system if we choose windows protection, also windows defender antivirus is protecting the system when we enable it. Those backdoor malwares will be able to bypass windows av? so that your scenario will be accomplished. This looks like just a possibility to accomplish. This won't mean %100 success for trojan to be successfull in comppromising system. There is not only firewall side ,also av side there is.. Thanks...

[@LaserFur]

I set "outbound" to default to "blocked" in order to deal with spyware like windows. I know that if infected spyware could easily disable this. I want to find a solution where the PC tells an external firewall the name of the process for each outbound connection attempt.

[@NitrousXProductions]

You mentioned not using windows firewall but suggested like a hardware firewall is there any you would suggest. General consumer routers that we get from the ISP are pretty bad for blocking software. So if you could suggest some that would be great thanks

[@georgeindestructible]

Excuse me but isn't this, assuming we run a malicious file first manually right?

[@michaelleeper3649]

How will this work against Windows 10 Firewall?

[@neilmurphy845]

Shouldn't you get a notification tell new Defender is off and the settings were changed

[@johnsweda2999]

What's the matter with virustotal doesn't work anymore for me, do you need to be signed in logged in now before you didn't, if you try and upload URL page nothing happens

[@nzu11239]

You should make a video of how to configure your firewall.

[@-zerocool-]

I'm guessing Emsisoft behaviour blocker will block this first? I use Glasswire as my "firewall" but a router firewall enabled too?

[@wilfredotorres6628]

Hi Leo, Do you recommend any firewall like a tiny wall or Comodo firewall which you don.t hear much from. Even your product has done away with a firewall Emisoft AV. I believe most Av products just harden the existing firewall example F-secure.

[@AtomicPixel42]

There is a software (more like a gui) called Windows Firewall Control. It has an option called Secure Profile that deletes or disable any firewall rule that was not created using that software, even if created using cmd running as admin. But I'm not sure if it is that secure. It's now owened by Malwarebytes too. And I double down on asking you to do a video about good firewalls =)

[@springbok4015]

Try it on Windows 10...

[@TheCocoaDaddy]

Yeah!

[@arisu7397]

@Dex4Sure of course windows defender would be turned off when using third party av.

[@nitaihat12]

so how does this malware obtein premissions to change firewall settings? doesn't that need admin perms?

[@ptyxx]

If you use exploits, no (most of the viruses do)

[@nitaihat12]

@@ptyxx I see, could you point me somewhere I can learn about how such an exploit might work?

[@ltxr9973]

​@@nitaihat12 Just look at CVEs And of course it requires admin privileges. As much as I appreciate this channel, he often seems to blatantly skip things that would make you worry less. This might be either due to him targeting less experienced users that indeed shouldn't get a false sense of security with all the malware out there, or if it is to help sales of security software. If you are an experienced user, you can spend less money on security software and instead just keep your eyes open. But sure, don't do as root.

[@PassionataDance]

Powershell injection Set-MpPreference -DisableRealtimeMonitoring $true

[@Rohambili]

Which firewall you suggest me to use in windows server i used like a router... when i use symantec Endpoint protection my gigabit net speed is half. which firewall is decent and dont slowing down internet share speed? Pls suggest me! Thanks!

[@sydniusalminia5364]

What's the program you're using there to simulate this stuff?

[@Madrid-ee8qf]

What kind of software did you use to analyze that malware step by step?

[@brentjones9323]

Quick question, what happens if you are using an AV product that uses the Windows Firewall? Sophos I know uses Windows Firewall, so would this than be on the AV product to pick up on the trojan?

[@j2klegend]

Totally agree. Especially if the system need to be protected in a LAN file share environment.

[@01sapphireGTS]

1. Can you differentiate between Windows Firewall, Windows Defender, and Microsoft Security Essentials in Windows 7? 2. Is Microsoft Security Essentials adequate when used in Windows 10?

[@arnimkrause5696]

I use Private Firewall on my laptop. It lets nothing through that's not part of the operating system and lets you know if something is trying to get onto your system. It's a learning curve to use it.

[@aBc-123-XyZ]

I know Online Armor is no longer supported,but can it still be used on Windows 10 64bit? Just curious since it was a firewall I used before. Thanks 😎✌

[@ultimate3dition343]

Hello to you thank you for the information but there are some games forza Horizon 4 does not work online if the Windows Firewall is not activated. Because once I had a problem with online games and doing my research it was the firewal which was to deactivate the problem. I can't explain that doing this causes some problem with Windows 10 games.

[@o4saken1]

Is this because it's an administrator user account in Windows? If so would this .exe still be successful in a regular/non-admin account?

[@MTGeomancer]

Wouldn’t a separate hardware firewall have to be manually configured for every application you run? Otherwise it would rely on UPnP which is pretty easy for malware to abuse? I’m no expert though. I do have an external firewall but it is UPnP based so not sure it does much.

[@georgegousios1794]

would the addition of Tinywall make sense? It is supposed to block apps from disabling the Windows Firewall, aside from its whitelist policy

[@zipzeolocke2]

I think it would be informative to make a video on firewall usage. Are there certain firewalls that conflict with others? When a certain application stops functioning correctly I often wonder is it my router's firewall conflicting with my computers firewall? Or was it just a Microsoft or Google update that broke things. I'm more inclined to believe the ladder

[@Mario583a]

Title: You shouldn't use Windows Firewall. Me: He said nothing about Windows Firewall with Advanced Security.

[@notsosussy]

The good thing about default windows firewall is to block remote code execution vulnerabilitis. in my opinion, directly bind connections are denied, but the problem is when the connection is from inside to outside, windows firewall will just look and says "ok"

[@math001]

Just a question - shouldn't your antivirus block the malware before it makes changes anyways? I'm not too familiar with how this works especially backdoors. I've been using ESET Antivirus + Windows Firewall for almost 10 years already because of how lightweight it is. Haven't had a single problem. I also appreciate the cheaper cost vs the Internet Security version. I used the whatever version it was that had the firewall prior to that. Didn't notice any difference as a regular user who don't fiddle with firewall rules and all that. Just considering it again if Windows Firewall really is that bad

[@mar_kohoho]

I use "Windows Firewall Control" from Malwarebytes. is it good for something?

[@TheMultimargarin]

It’s a good add-on for the system firewall. There will be many requests for creating rules, but this will improve system security.

[@wiredmind]

Do you think you could check the OSX firewall too?

[@r3n846]

So, one edge case where your system needs to already be compromised means that Windows Firewall is useless?

[@garethwilliams3602]

I use avira prime, mainly because of the VPN aspect. Other VPN's cost the same as Avira and Avira gives you an AV on top of that. However I noticed Avira uses the WF and I was wondering why would Avira do that if WF is as bad as what people say? Any help or answers greatly appreciated.

[@alfawolve869]

This only happened if the malware can pass defender antivirus for windows right?

[@BarafuAlbino]

How would an external firewall help? As if malware can not connect over port 433... Whitelist web sites you visit?

[@TylerHaley]

i use tinywall. let me know what u think. also how to install modem firewall like u suggest.

[@hoshiataru]

My main problem with third party firewalls is that I can't get Mobile Hotspot working! I haven't tried it yet but do third party firewalls now supprot WSL/Pico? I remember then most firewalls can't differentiate it too from the system.

[@ilkererol1986]

So which firewall?

[@shubhamk3262]

Please make a video of best firewall we can use. It will be very helpful.

[@solarisis]

Are you saying don't use windows defender even if you have another anti-virus/firewall program like Sophos Home 3.0? I have both running at the moment.

[@KALTBLUTWOLF1]

I am using Windows Firewall Control which is a 3rd party interface for the windows firewall. It has an option called 'Secure Profile' which blocks any attempt to change firewall rules that does not come from this interface. But I am considering to switch to NetLimiter's firewall but I am not sure whether it is good enough to help against malware. Their support would not even answer me and they don't have a forum yet and neither a subreddit interestingly...

[@86JonesL]

Malwarebytes Windows firewall control has something called a secure profile and secure rules, no idea how effective it is though.

[@-GameHacKeR-]

I would love to see how this test would go with ZoneAlarm free firewall without smart defence net running. Put to the same test your do with AV software.

[@abrarmurshed1363]

I have liked every video I have watched.........amazing channel.

[@michaelwaterman3553]

I can’t really say that I would agree with the title and conclusion. The WF is z a great addition to Windows and can do multiple levels of authentication. What you demonstrated is a local infection that connects to an external source, it could do that by utilizing a session and skip any host based fw. I do agree on net network based fw. BTW, in a corporate environment always set the firewall to enable and manage it.

[@rudranilghosh2713]

Does Kaspersky and BitD. has an inbuilt firewall?

[@AnAN-bn1ol]

what's the difference between registered and non registered domain with PAGE NOT FOUND 404 message? can you explain I can't find the info, how to distinguish them?

[@Mark_Wilson07]

Could you do a video with windows 10 with defenders isolation technologies enabled ?

[@ComeonWindows]

In your next video, could you test malwarebytes antimalware?

[@roemal8710]

Hey TPSC I saw an ad for a pc optimizer pro type antivirus/ pc speeder called "mycleanpc" and i was wondering if you could do a video on it because it has a TV advertisement and i was hoping you could shed some light so people could report it!

[@coolmonkey5269]

i was using kaspersky total fiewall before.. no detections... clean system now using mcafee total firewall... i get many warning - blocked unsafce connection is it true that kaspersky failed to detect or mcafee is false signals 🙄

[@TheSpanjaMan]

Does this affect people who use standard account with admin separated? Can this get past UAC?

[@CloudJack]

So it replaces windows defender to windefender? That would be so easily missed.

[@seanleastria4478]

The end say not trying to bash Windows Firewall. But that is not even a question when it comes to objective reporting. The question is whether or not users should simply disable it and use something else.

[@DamonWakefield]

What about using IFEO to essentially disable netsh?

[@pineappleroad]

It took me until now to realise that the ISP supplied router does not seem to have a built in firewall, at least as far as i can tell The router which i am using as an access point does have a firewall though, although because i had it in access point mode, the firewall was automatically turned off (since in access point mode the WAN port becomes another LAN port) Just now i switched a few Ethernet cables around so everything is now connected through the router that i was using as an access point, and changed the router back over to router mode, so now the ISP supplied router is basically being used as a modem All the devices i have were already either connected to Ethernet, or the router which i used to have set up as an access point, this router is upstairs, while the ISP supplied router is in the kitchen, the WiFi signal of the ISP supplied router drops out in certain areas of the living room, and does not reach upstairs, whereas the router i have upstairs covers all parts of the house except for the kitchen, but this doesn’t bother me, as I don’t have any devices in the kitchen that connect to WiFi

[@wramarante]

Hi, which tool is that you're using?

[@Tuxy79]

I have airport extremes, is that ok?

[@AlrekArinbjorn]

Can you do a demo of this kind of attack against comodo firewall?

[@Teddemon_Original]

What do I do if I don't have alternative Firewalls available at the moment? Do I turn off windows firewall systems regardless? Please elaborate.

[@Teddemon_Original]

I have McAfee LiveSafe, and it says here a Firewall too. Is it different from Windows firewall? Is it sufficient from the thing that's rendering the windows firewall ineffective?

[@brycegamer6520]

Can I use firewall and another antivirus

[@breakingthe4thwall260]

Leo could you please test the latest version of Rogue killer anti malware it's been years since you've tested it and they have a trial of the full on real time protection version you can test. i would love to see how it does now that it has real time protection. Thanks!

[@jihionify]

Then why emsisoft uses windows firewall and not one of its own like other popular avs?

[@santiagolabayjr.1596]

Bro waht if i use windows firewall to prevent the game from trying to go online

[@TheMultimargarin]

If you add the "Windows Firewall Control" add-on, this should improve the situation of protecting the network from malicious activity. Kettles will boil from add-on requests for creating rules for each network action, but this will be effective to limit the actions of the malware and legitimate programs that should not have access to the network.

[@johnDingoFoxVelocity]

actually windows 10 as well as windows server 2003 have basically the same firewall and most malware that affected server 2003 surprise works in windows 10 i highly recommend another firewall program as well as anti malware and anti virus as well

[@BackStrayNat]

any firewall recomendation?