netsh firewall Cannot dump settings

[Guest]

Hi,
It is stated in the netsh help that you can dump the firewall settings in
order to load
them via the script command.
However, when i try to dump the netsh firewall config it does not produce
anything.
Does one know which command does work ?
I tried
netsh firewall dump > c:\mydump.txt but without success.

Any help appreciated

Brgds

bruno

 

[Torgeir Bakken \(MVP\)]

Hi,
It is stated in the netsh help that you can dump the firewall settings in
order to load
them via the script command.
However, when i try to dump the netsh firewall config it does not produce
anything.
Does one know which command does work ?
I tried
netsh firewall dump > c:\mydump.txt but without success.

Hi

You can display the settings like this (in a command prompt):

netsh.exe firewall show config

For a more detailed listing:

netsh.exe firewall show config verbose = ENABLE

 

[bp]

Thanks, but if i make a netsh.exe firewall show config > c:\myconfig.txt
will this be in the right format to import it via the netsh exec
c:\config.txt command ?

Brgds

bruno

 

[David Beder [MSFT]]

The dump command isn't supported by the firewall context. Unfortunately the
netsh engine always lists dump as an option even when its not.

Windows Firewall encourages the use of application exceptions over port
exceptions. Such exceptions are stored using the full path to the
application. As such the excepted applications must be in the exact same
path for a dump to be easy to migrate. There were some other complications
which prevented us from supporting this option.

 

[bp]

Thanks,
now what is the alternative that i could use to export / import all the
settings from one pc to another ?
would the use of sysocmgr allow the import with the netfw.inf file ?

Is there another way to do so easily (i know you can script the whole thing,
but is there a command line ?)

Brgds

bruno

 

[Ronin-Oni]

check out the netfw.inf file. there is a brief tutorial half way down
this page http://tinyurl.com/pme4x
Be careful with the allowed programs list, windows firewall requires
full path (as stated above) so if doing a company deployment keep
standardizations in place so all programs are kept in the same place.
the .inf file can be activated through the command line control reset