Solved

Using Windows Firewall to separate 2 networks on PC with dual NICS?

Posted on 2016-10-27
5
122 Views
Last Modified: 2016-10-31
I have a PC that needs access to our production network as well as a separate network in a meeting room. The production network uses the 172.20.xxx.xxx IP schema and the other 192.168.xxx.xxx. The meeting room network is just a simple cable modem open to the Internet with only the routers built in firewall turned on. The production network is behind a Cisco ASA.

If I set 1 NIC up on the prod network and the other on the meeting room network, can I use Windows Firewall to keep the traffic from the meeting room network from accessing the production network with only a few exceptions for the 1 or 2 applications I need? If so, how?
0
Comment
Question by:coptechs
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
5 Comments
 
LVL 58

Expert Comment

by:Cliff Galiher
ID: 41863090
Windows will bot route traffic between either network by default. That actually takes active configuration. And that means windows server and honestly, windows isn't a great router (and is an expensive use of a windows server license.)
0
 
LVL 1

Author Comment

by:coptechs
ID: 41863181
The machine has Windows 7 and my concern is someone connected to the meeting room network having the ability to get onto the production network. I'm not using the Windows machine as a router.
0
 
LVL 58

Accepted Solution

by:
Cliff Galiher earned 500 total points
ID: 41863183
Unless they exploit an u patched vulnerability in the OS, the two networks will not see each other through that machine. They will be separate.
0
 
LVL 54

Expert Comment

by:McKnife
ID: 41863611
What would make it pretty is would be to use different network profiles (talking about "public" vs. "domain" vs. "private") for the different NICs. That would enable you to simply use two firewall rulesets (for example one for profile domain and one for profile public) that allow different things. We did that once and it just worked.
0
 
LVL 1

Author Closing Comment

by:coptechs
ID: 41867519
Thank you.
0

Featured Post

Easy, flexible multimedia distribution & control

Coming soon!  Ideal for large-scale A/V applications, ATEN's VM3200 Modular Matrix Switch is an all-in-one solution that simplifies video wall integration. Easily customize display layouts to see what you want, how you want it in 4k.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

An article on effective troubleshooting
In previous parts of this Nano Server deployment series, we learned how to create, deploy and configure Nano Server as a Hyper-V host. In this part, we will look for a clustering option. We will create a Hyper-V cluster of 3 Nano Server host nodes w…
With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

739 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question