:::MENU:::

Windows Firewall: Allow ICMP exceptions

Defines the set of Internet Control Message Protocol (ICMP) message types that Windows Firewall allows. Utilities can use ICMP messages to determine the status of other computers. For example Ping uses the echo request message. If you do not enable the “Allow inbound echo request” message type Windows Firewall blocks echo request messages sent by Ping running on other computers but it does not block outbound echo request messages sent by Ping running on this computer. If you enable this policy setting you must specify which ICMP message types Windows Firewall allows this computer to send or receive. If you disable this policy setting Windows Firewall blocks all the listed incoming and outgoing ICMP message types. As a result utilities that use the blocked ICMP messages will not be able to send those messages to or from this computer. If you enable this policy setting and allow certain message types then later disable this policy setting Windows Firewall deletes the list of message types that you had enabled. If you do not configure this policy setting Windows Firewall behaves as if you had disabled it. Note: If any policy setting opens TCP port 445 Windows Firewall allows inbound echo requests even if the “Windows Firewall: Allow ICMP exceptions” policy setting would block them. Policy settings that can open TCP port 445 include “Windows Firewall: Allow file and printer sharing exception” “Windows Firewall: Allow remote administration exception” and “Windows Firewall: Define inbound port exceptions. “Note: Other Windows Firewall policy settings affect only incoming messages but several of the options of the “Windows Firewall: Allow ICMP exceptions” policy setting affect outgoing communication.


Additional Information

  1. Registry path is:

    HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowOutboundDestinationUnreachable HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowOutboundSourceQuench HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowRedirect HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowInboundEchoRequest HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowInboundRouterRequest HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowOutboundTimeExceeded HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowOutboundParameterProblem HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowInboundTimestampRequest HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowInboundMaskRequest HKEY_LOCAL_MACHINE -> SOFTWARE -> Policies -> Microsoft -> WindowsFirewall -> StandardProfile -> IcmpSettings # AllowOutboundPacketTooBig

  2. The Administrative Template path is:

    Network -> Network Connections -> Windows Firewall -> Standard Profile

Notes

* Making mistakes while changing registry values can affect your system adversely. We recommend you to create a System Restore point before making registry manipulation. If you're new to Registry Editor, read this beginner's guide.
** To locate the registry and administrative template path, checkout beginner's guide.
You're here :
Checkout Kapil Sparks™