Skip to main content

FirewallException element (Firewall extension)

Registers an exception for a program or a specific port and protocol in the Windows Firewall. For more information about the Windows Firewall, see Windows Firewall with Advanced Security.

Parents

Component, File

Children

Attributes

Action (FirewallActionTypeUnion) : The action for this firewall exception.

Description (String) : Description for this firewall rule displayed in Windows Firewall manager.

EdgeTraversal (FirewallEdgeTraversalTypeUnion) : Sets the edge traversal of the firewall exception.

Enabled (FirewallYesNoPropertyType) : Indicates whether the firewall exception should be enabled.

File (String) : Identifier of a File to be granted access through the firewall. By default, all incoming ports and protocols are allowed unless the Port and.or Protocol attributes are specified.

If you use File, you cannot also use Program.

Grouping (String) : Grouping for the firewall exception.

IcmpTypesAndCodes (String) : ICMP types and codes for the firewall exception.

Id (String) : Unique ID of this firewall exception. If the Id is not specified, one will be generated.

IgnoreFailure (wxs:YesNoTypeUnion) : If "yes", failures to register this firewall exception will be silently ignored. If "no" (the default), failures will cause rollback.

Interface (String) : Interface for the firewall exception.

InterfaceType (FirewallInterfaceTypeUnion) : Interface type for the firewall exception.

IPSecSecureFlags (FirewallIPSecSecureFlagsUnion) : IPSec secure flags for the firewall exception.

LocalAppPackageId (String) : Local AppPackageId for the firewall exception.

LocalScope (FirewallLocalScopeTypeUnion) : Local scope for the firewall exception.

LocalUserAuthorizedList (String) : Local user authorized list for the firewall exception.

LocalUserOwner (String) : Local user owner for the firewall exception.

Name (String, required) : Name of this firewall exception, visible to the user in the firewall control panel.

OnUpdate (FirewallOnUpdateTypeUnion) : Installation instruction when updating the firewall exception.

Outbound (wxs:YesNoTypeUnion) : If "yes", registers an outbound firewall rule. The default is "no".

Port (String) : Port to allow through the firewall for this exception. By default, any program is allowed access through the port unless a File or Program attribute is specified.

Profile (FirewallProfileTypeUnion) : Profile type for this firewall exception. Default is "all".

Program (String) : Path to a target program to be granted access through the firewall. By default, all incoming ports and protocols are allowed unless the Port and.or Protocol attributes are specified.

Note that this is a formatted field, so you can use [#fileId] syntax to refer to a file being installed. If you use Program, you cannot also use File.

Protocol (FirewallProtocolTypeUnion) : IP protocol used for this firewall exception. If Port is defined, "tcp" is assumed if the protocol is not specified.

RemoteMachineAuthorizedList (String) : Remote machine authorized list for the firewall exception.

RemotePort (String) : Remote port for the firewall exception.

RemoteUserAuthorizedList (String) : Remote user authorized list for the firewall exception.

Scope (FirewallScopeTypeUnion) : The scope of this firewall exception, which indicates whether incoming connections can come from any computer including those on the Internet or only those on the local network subnet. To more precisely specify allowed remote address, specify a custom scope using RemoteAddress child elements.

Service (String) : Service for the firewall exception. Cannot be specified when the firewall exception is a child of a service element.

Edit the schema for this page