# Werk #10197: Windows Agent can configure Windows Firewall

 Component Checks & Agents Title Windows Agent can configure Windows Firewall Date Nov 13, 2019 Checkmk Editon Checkmk Raw (CRE) Checkmk Version 2.0.0i1 1.6.0p7 Level Prominent Change Class New Feature Compatibility Compatible - no manual interaction needed

Previously the Windows Firewall could prevent a connection to the Windows Agent (this is the default behavior) thus forcing a system administrator to configure potentially every host with Windows Agent installed.

Now the Windows Agent can configure the Windows Firewall rules that are needed for the agent.

There are two possibilities:

For Windows Agent service you may edit Checkmk configuration file adding at the end:

system:
firewall:
mode: configure


Then restart the agent service or trigger a agent configuration reload.

You could also execute the agent exe to set the rules for you. The command \path\to\check_mk_agent.exe fw -configure will configure the firewall correctly for \path\to\check_mk_agent.exe.

It is also possible to make the agent remove the firewall configuration by setting the mode option to "clear" in the agent configuration file or by executing the command \path\to\check_mk_agent.exe fw -clear.

To the list of all Werks