I’ve been avoiding learning how to use the windows firewall for a long time now. Troubleshooting a remote UAG setup forced me to take the time to learn this.
We were trying to identify scenarios where UAG was supposed to rewrite the URL. In their test setup the client wasn’t blocked from directly accessing the application website published through UAG using the application website’s IP address – in essence bypassing UAG. This led to some confusing results while we were testing.
Temporarily setting up a firewall rule on the client computer to block traffic directly to the application web server addressed the problem and gave us consistent results.
netsh advfirewall firewall add rule name=”disallow xyz webapplication” action=block enable=yes localip=any remoteip=nnn.nnn.nnn.nnn
Removing the rule at the end of the testing was as simple as
netsh advfirewall firewall delete rule name=”disallow xyz webapplication”
It appears Vista has a different command syntax
netsh advfirewall add/delete
netsh advfirewall firewall add/delete