Action 1
Action Link Click
here for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant.
Script Type
URL
http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113
Action 2
Action Link Click
here to leave Windows Firewall enabled, but also allow incoming traffic on the port reserved for BES.
Script Type
BigFix Action Script
wait "{pathname of system folder}\netsh.exe" advfirewall firewall add rule name="BES - UDP" dir=in action=allow description="BigFix Enterprise Client" enable=yes profile="{(if (current profile type of firewall = domain firewall profile type) then "domain" else (if (current profile type of firewall = public firewall profile type) then "public" else "private"))}" protocol=udp localport={value "ListenPort" of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of registry} interfacetype=any
wait "{pathname of system folder}\netsh.exe" advfirewall firewall add rule name="BES - TCP" dir=in action=allow description="BigFix Enterprise Client" enable=yes profile="{(if (current profile type of firewall = domain firewall profile type) then "domain" else (if (current profile type of firewall = public firewall profile type) then "public" else "private"))}" protocol=tcp localport={value "ListenPort" of key "HKLM\SOFTWARE\BigFix\EnterpriseClient\GlobalOptions" of registry} interfacetype=any
wait "{pathname of system folder}\netsh.exe" advfirewall firewall add rule name="BES - ICMP" dir=in action=allow description="BigFix Enterprise Client ICMPv4" enable=yes profile="{(if (current profile type of firewall = domain firewall profile type) then "domain" else (if (current profile type of firewall = public firewall profile type) then "public" else "private"))}" protocol=ICMPv4 interfacetype=any
wait "{pathname of system folder}\netsh.exe" advfirewall firewall add rule name="BES - ICMPv6" dir=in action=allow description="BigFix Enterprise Client ICMP" enable=yes profile="{(if (current profile type of firewall = domain firewall profile type) then "domain" else (if (current profile type of firewall = public firewall profile type) then "public" else "private"))}" protocol=ICMPv6 interfacetype=any
regset "{"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\" & (if (current profile type of firewall = domain firewall profile type) then "DomainProfile]" else (if (current profile type of firewall = private firewall profile type) then "StandardProfile]" else "PublicProfile]"))}" "DoNotAllowExceptions"=dword:00000000
delete restart_services.bat
appendfile @echo off
appendfile net stop "Windows Firewall"
appendfile net start "Windows Firewall"
move __appendfile restart_services.bat
wait "{pathname of client folder of site "BESSupport" & "\RunQuiet.exe"}" restart_services.bat
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Action 3
Action Link Click
here to disable Windows Firewall for the current network profile.
Script Type
BigFix Action Script
if {current profile type of firewall = domain firewall profile type}
regset "{"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]"}" "EnableFirewall"=dword:00000000
elseif {current profile type of firewall = private firewall profile type}
regset "{"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]"}" "EnableFirewall"=dword:00000000
else
regset "{"[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]"}" "EnableFirewall"=dword:00000000
endif
delete restart_services.bat
appendfile @echo off
appendfile net stop "Windows Firewall"
appendfile net start "Windows Firewall"
move __appendfile restart_services.bat
wait "{pathname of client folder of site "BESSupport" & "\RunQuiet.exe"}" restart_services.bat
Success Criteria
This action will be considered successful when the applicability relevance evaluates to false.
Action 4
Action Link Click
here for more information about Windows Firewall for Windows Vista.
Script Type
URL
http://www.microsoft.com/windows/products/windowsvista/features/details/firewall.mspx
Action 5
Action Link Click
here for information on how to make this action a "policy" action that will automatically open the BES port on any computer that has this Fixlet message relevant.
Script Type
URL
http://support.bigfix.com/cgi-bin/kbdirect.pl?id=113