2 Replies Latest reply on Mar 2, 2012 9:46 AM by lijojoy

    Please help with port scan results

      I just did a portscan on all common ports and found all to be in stealth mode except DNS and HTTPS.  I am very new to this McAfee firewall and would like to know how to put these ports into stealth mode, or even if they should be in stealth mode

        • 2. Re: Please help with port scan results



          Stealth mode is a mechanism in Windows Firewall that helps prevent malicious users from discovering information about network computers and the services that they run.


          It is common for an attacker to use an automated scanning process to send query packets to a range of IP addresses. For each IP address, the scanning process sends packets to a range of port numbers, and the response packets are used to identify the services that are installed on the computer. For example, if a computer responds to a UDP query with an ICMP unreachable packet, or to a TCP query with a reset message, then an attacker is able to determine the existence of a computer at that IP address and an open port in Windows Firewall that can be used to reach the computer. The attacker can then use this information to attempt to exploit vulnerabilities.


          Stealth mode in Windows Firewall with Advanced Security is designed to help protect against this kind of attack. Stealth mode blocks outgoing ICMP unreachable and TCP reset messages for a port when no application is listening on that port.


          Stealth mode is enabled by default on computers that are running Windows Vista®, Windows Server® 2008, Windows® 7, and Windows Server® 2008 R2.



          Message was edited by: ajacobs on 3/2/12 9:46:14 AM CST