Windows firewall and updates


1. What is a firewall?

A firewall is software or hardware that checks information coming from the Internet or a network, and then either blocks it or allows it to pass through to your computer, depending on your firewall settings.
A firewall can help prevent hackers or malicious software (such as worms) from gaining access to your computer through a network or the Internet. A firewall can also help stop your computer from sending malicious software to other computers.
The following illustration shows how a firewall works:
Illustration showing how the programs that you haven't allowed into your computer are blocked by a firewall
Illustration of how a firewall works

See also


Understanding Windows Firewall settings

In this article
A firewall can help prevent hackers or malicious software (such as worms) from gaining access to your computer through a network or the Internet. A firewall can also help stop your computer from sending malicious software to other computers.
There are three settings on the General tab in Windows Firewall. Here's what they do and when you should use them:

Windows Firewall can help protect your computer



Always make sure you have Windows Firewall or another firewall running on your computer.

On (recommended)

This setting is selected by default. When Windows Firewall is on, most programs are blocked from communicating through the firewall. If you want to unblock a program, you can add it to the Exceptions list (on the Exceptions tab). For example, you might not be able to send photos in an instant message until you add the instant messaging program to the Exceptions list.

Block all incoming connections

This setting blocks all unsolicited attempts to connect to your computer. Use this setting when you need maximum protection for your computer, such as when you connect to a public network in a hotel or airport, or when a computer worm is spreading over the Internet. With this setting, you are not notified when Windows Firewall blocks programs, and programs on the Exceptions list are ignored.
When you select Block all incoming connections, you can still view most webpages, send and receive e‑mail, and send and receive instant messages.

Off (not recommended)

Avoid using this setting unless you have another firewall running on your computer. Turning off Windows Firewall might make your computer (and your network, if you have one) more vulnerable to damage from hackers and malicious software (such as worms).

Note

·         If some firewall settings are unavailable and your computer is connected to a domain, your system administrator might be controlling these settings through Group Policy.

See also

Turn Windows Firewall on or off

If your computer is connected to a network, network policy settings might prevent you from completing these steps.

Hide content To turn on Windows Firewall

2.      Click Turn Windows Firewall on or off. Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
3.      Click On (recommended), and then click OK.
If you want the firewall to block everything, including the programs selected on the Exceptions tab, select the Block all incoming connections check box.

Hide content To turn off Windows Firewall

You should not turn off Windows Firewall unless you have another firewall enabled. Turning off Windows Firewall might make your computer (and your network, if you have one) more vulnerable to damage from worms or hackers.
2.      Click Turn Windows Firewall on or off. Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
3.      Click Off (not recommended), and then click OK.

2. What are updates?

Updates are additions to software that can prevent or fix problems, enhance the security of the computer, or improve the computer's performance. We strongly recommend that you turn on Windows automatic updating so that Windows can install security and other important or recommended updates for your computer as they become available.
Many software publishers notify you when an update or new version of a program is available. To see if you can sign up for product support services or set a program to automatically install updates, check the program's help or visit the software publisher's website.

Turn automatic updating on or off

To have Windows install important updates as they become available, turn on automatic updating. Important updates can offer significant benefits, such as improved security and reliability. You can also set Windows to automatically install recommended updates, which can address non-critical problems and help enhance your computing experience. Optional updates are not downloaded or installed automatically. Read more about updates online.
2.      In the left pane, click Change settings.
3.      Choose the option that you want.
4.      Under Recommended updates, select the Include recommended updates when downloading, installing, or notifying me about updates check box, and then click OK. Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Understanding Windows automatic updating

Here are answers to some common questions about updating Windows automatically.

Hide content Why update Windows automatically?

Because with automatic updating, you don't have to search for updates online or worry that critical fixes for Windows might be missing from your computer. Windows automatically checks for the latest updates for your computer. Depending on the Windows Update settings you choose, Windows can install updates automatically or just let you know they're available. For more information, see Turn automatic updating on or off.

Hide content How do I start updating Windows automatically?

If you haven't already, just turn on automatic updating. For more information, see Turn automatic updating on or off.

Hide content How much does it cost to update Windows automatically?

There is no charge to you for the Windows Update service. However, depending on how you are billed for your Internet connection, standard local and long distance phone charges and Internet service charges might apply for the time required to download an update.

Hide content How long does it take to download an update?

It depends on the type of Internet connection you have and the size and number of updates your computer needs. However, updates are automatically downloaded behind the scenes when you're online. They do not interfere with other downloads, and if you disconnect they will continue to download in the background the next time you go online.

Hide content How does Windows determine which updates my computer needs?

Windows Update contains software tools that detect information about your computer, such as the make and model and the version of Windows and other Microsoft software that your computer is running. Microsoft uses that information to install only the updates your computer needs. For more information, read the Windows Update privacy statement online.

Hide content If I choose to update Windows automatically, do I still need to visit the Windows Update website?

No. Windows will automatically install updates for your computer as they become available. Also, for this version of Windows, the website has been replaced by Windows Update in Control Panel. If you want to check for updates manually, follow these steps:
2.      In the left pane, click Check for updates.

Tip

·         To find out how to get updates for Windows and your other Microsoft programs such as Microsoft Office, go to the Microsoft Update website. If you're already using Microsoft Update to get updates for your computer, Windows Update in Control Panel will automatically open and display your update status.

Hide content When are updates downloaded?

Updates are downloaded behind the scenes when you're online. They do not interfere with other downloads. If you disconnect from the Internet before an update is fully downloaded, the download process will continue the next time you're online.

Hide content When are updates installed?

It depends on the automatic updating option you choose. If you choose the recommended option, updates are installed at 3:00 A.M. or on a schedule that you choose. If you turn off your computer before the scheduled time, you can install updates before shutting down.
If your computer is in one of the power-saving states (Sleep or Hibernate) during a scheduled update, and if your computer is plugged in to a power source, Windows will wake your computer long enough to install new updates. If your computer is running on battery power, however, Windows will not install updates. Windows will try to install them instead at the next scheduled installation time. To schedule when Windows automatically installs updates:
2.      In the left pane, click Change settings, and then make sure that the Install updates automatically (recommended) option is selected.
3.      Choose the frequency and time of day when you want new updates to be installed, and then click OK. Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Hide content Can I see which updates Windows has automatically installed?

Yes. View the history in Windows Update in Control Panel, or go to Installed Updates:

Hide content Can I choose which updates Windows automatically installs?

Yes. You can choose to install important updates only, or important and recommended updates. Optional updates are not installed automatically. Instead, you can choose to install them by reviewing available updates when you check for updates using Windows Update in Control Panel. For more information, see Turn automatic updating on or off and Change how Windows installs or notifies you about updates.

Hide content Will I be notified if there's a problem and important updates have not been installed?

Yes. Windows Update will notify you if security and other important updates cannot be installed. For more information, see Troubleshoot problems with installing updates.

See also

Updates: frequently asked questions

Here are answers to some common questions about updates. For information about updates and your privacy, read the Windows Update privacy statement online.

Hide content What are updates?

Updates are additions to software that can prevent or fix problems, enhance the security of the computer, or improve the computer's performance.

Hide content Where can I find updates?

For Windows updates, including those for Internet Explorer or programs that ship with Windows, go to Windows Update in Control Panel:
2.      In the left pane, click Check for updates.
We recommend that you turn on automatic updating so Windows can install new updates as they become available. For more information, see Turn automatic updating on or off.
For information about finding updates for the Microsoft Office System, see Update Microsoft Office. For updates for other programs and devices that you use, check the website of the publisher or manufacturer.

Hide content Do I need to download and install updates?

Yes. Updates do not take effect until they are installed, but to install updates, you must first download them to your computer. You can choose to have Windows automatically download and install updates for you, automatically download updates and notify you so you can install them yourself, or notify you to both download and install new updates yourself. For more information, see Change how Windows installs or notifies you about updates.

Hide content What types of updates can Windows install automatically?

You can set Windows to automatically install important and recommended updates, or to install important updates only. Important updates can offer significant benefits, such as improved security and reliability. Recommended updates can address non-critical problems and help enhance your computing experience. Optional updates are not downloaded or installed automatically. For more information, see Turn automatic updating on or off and Change how Windows installs or notifies you about updates.

To install drivers and other optional updates

2.      In the left pane, click Check for updates, and then wait while Windows looks for the latest updates for your computer.
3.      If any updates are found, click View available updates.
4.      Select the optional updates that you want, and then click Install. Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.

Hide content How often should I update my computer and my programs?

As often as possible. Updates are the best way to prevent or repair known problems, and they can enhance the security of your computer. For Windows, the easiest way to install updates is to turn on automatic updating. Windows will install new updates as they become available. For more information, see Turn automatic updating on or off.

Hide content What happens if I forget to install an update?

Your computer might be at risk or you might experience unnecessary problems with Windows or your programs.

Hide content Can I get updates automatically?

For Windows and programs that ship with Windows, such as Internet Explorer, yes. Just turn on automatic updating. For more information, see Turn automatic updating on or off. For other programs, check the website of the publisher or manufacturer to see if you can get updates automatically.

Hide content How much do updates cost?

Updates from Microsoft for Microsoft products are free as part of maintenance and support services. For other products, check with each program publisher and device manufacturer to see if updates are free of charge. Depending on your Internet connection, standard local and long distance phone charges and Internet service charges might apply while you download and install updates from any publisher or manufacturer.

Hide content Why do I need to install some updates separately, before or after installing other updates?

Typically because these updates require you to restart your computer before they can take effect. You might, for example, need to install an update for Windows Update itself before you can check for other updates for your computer. In other cases, an update might be a new version or a service pack for software that you're currently running. To make sure that your computer is ready to install these updates, you must first install all important updates for your computer. After you've installed important updates, Windows will ask if you want to install the stand-alone or "exclusive" update by itself.

Hide content I share my computer with other people. Do we all get the same updates?

Yes. Updates apply to Windows and your programs, regardless of who uses them.

Hide content I have a home network. Can I update all my computers at the same time?

No. You need to turn on automatic updating or check for updates for each computer separately. For example, computers running different versions of Windows need different updates. Windows detects which updates apply in each case but you can't, for example, apply updates for Windows XP to a computer running Windows 2000.

Hide content Can I remove updates?

You can remove some updates, but not updates that affect important operating system files. You should only remove an update if you're sure that it's causing a problem.
For more information, see Remove an update.

See also

How can I tell if my computer is up to date?

Your computer is up to date when you've installed the latest updates for Windows and your programs. To check for Windows updates, follow these steps:
2.      In the left pane, click Check for updates, and then wait while Windows looks for the latest updates for your computer.
3.      If any updates are found, click Install updates. Administrator permission required If you are prompted for an administrator password or confirmation, type the password or provide confirmation.
To check for updates for other software programs and devices, go to the publisher's or manufacturer's website.

Tips

·         To see how to get updates for Windows and other Microsoft programs at the same time, including updates for Microsoft Office (Word, Outlook, Excel, PowerPoint, and more), go to the Microsoft Update website.
·         Some programs, such as antivirus or spyware monitoring programs, provide a link to check for updates from within the program. Some software publishers also offer subscription services and can notify you when new updates are available. It's a good idea to check for updates for your security-related programs first, and then for the programs or devices you use most often.

See also

Get security updates for Windows

Security updates for Windows can help protect against new and ongoing threats to your privacy and your computer. The best way to get security updates is to turn on Windows automatic updating and stay informed about security issues.

Turn on Windows automatic updating

When you turn on automatic updating, Windows can automatically install important updates (including security updates) and recommended updates for your computer as Microsoft releases them. For more information, see Turn automatic updating on or off and How can I tell if my computer is up to date?

Stay informed about the latest security issues

To learn about new security updates, find how-to articles and security tips, and get answers to security-related questions, go to the Microsoft Security at Home website for the free, monthly Security Newsletter for Home Users from Microsoft.
To learn how Microsoft monitors and responds to security issues, go to the Microsoft Security Response Center website. It offers tools such as an alert service, monthly webcast, blog, and Really Simple Syndication (RSS) feeds to help you stay current with security-related updates and information for Windows.

See also


Security and privacy features in Internet Explorer

Internet Explorer offers a number of features to help protect your security and privacy when you browse the web.

Hide content What security features does Internet Explorer have?

Internet Explorer includes the following security features:
·         Phishing Filter, which can help protect you from online phishing attacks, fraud, and spoofed websites. For more information, see Phishing Filter: frequently asked questions.
·         Protected Mode, which can help protect you from websites that try to save files or install programs on your computer. For more information, see What does Internet Explorer protected mode do?
·         Pop-up Blocker, which can help block most pop-up windows. For more information, see Internet Explorer Pop-up Blocker: frequently asked questions.
·         Add-on Manager, which lets you disable or allow web browser add-ons and delete unwanted ActiveX controls. For more information, see How do browser add-ons affect my computer?
·         Notification when a website is trying to download files or software to your computer.
·         Digital signatures, which tell you who published a file and whether it has been altered since it was digitally signed. For more information, see What is a digital signature?
·         A 128-bit secure (SSL) connection for using secure websites. This helps Internet Explorer create an encrypted connection with websites run by banks, online stores, medical sites, or other organizations that handle sensitive customer information. For more information, see How to know if an online transaction is secure.

Hide content Which security features are turned on when I first use Internet Explorer?

By default, Internet Explorer is set to provide a level of security that can help protect you against common threats, such as spyware or other types of malware, when browsing the web. These settings can help protect against known security threats, such as websites installing add-ons or other programs without your knowledge.

Hide content How can I protect my privacy when I'm online?

Internet Explorer provides the following features that can help protect your privacy when you're online:
·         Privacy settings that specify how your computer handles cookies. For more information, see Change Internet Explorer Privacy settings.
·         Privacy alerts that let you know when you try to go to a website that doesn't meet the criteria in your privacy settings.
·         The ability to view a website's privacy statement. For more information, see Online privacy: frequently asked questions.

Hide content Why am I getting a message that reads "Your security setting level puts your computer at risk"?

You are getting this message because certain security settings are at a lower level than is recommended. By default, Internet Explorer has a minimum level for some settings that can help protect your computer from websites that are trying to install malicious or unwanted software without your knowledge or permission.

Hide content How do I know which settings are not at recommended levels?

To see which security settings are not at recommended levels, follow these steps:

To view Internet Explorer security settings

2.      Click the Tools button, and then click Internet Options.
3.      Click the Security tab.
4.      Click the Internet icon, and then click Custom level.
Settings that are not at recommended levels are highlighted in red.
Picture of security settings
Security settings set below recommended levels

Hide content  What is changed when I click "Fix Settings for Me" on the Information bar when my computer is at risk?

When you click Fix Settings for Me on the Information bar, Internet Explorer will reset the security settings that put your computer at risk back to their recommended settings. To see your security settings, follow these steps:

To view Internet Explorer security settings

2.      Click the Tools button, and then click Internet Options.
3.      Click the Security tab.
4.      Click the Internet icon, and then click Custom level.
Settings that are not at recommended levels are highlighted in red.

Hide content How do I change my Internet Explorer security settings?

To change your Internet Explorer security settings

2.      Click the Tools button, and then click Internet Options.
3.      Click the Security tab.
4.      Click the Internet icon.
5.      Do one of the following:
o        To pick a preset security level, drag the slider.
o        To change individual security settings, click Custom level. Change the settings as desired and click OK when you are done.
o        To set Internet Explorer back to the default security level, click Default level.
6.      When you are finished making changes to the security settings, click OK.

Hide content How do I change my Internet Explorer privacy settings?

To change your Internet Explorer privacy settings

2.      Click the Tools button, and then click Internet Options.
3.      Click the Privacy tab.
4.      Under Settings, do any of the following:
o        To pick a preset security level for cookies, drag the slider.
o        To allow or block cookies from specific websites, click Sites.
o        To load a customized settings file, click Import. These are files that modify the rules that Internet Explorer uses handle cookies. Since these files can override default settings, you should only import them if you know and trust the source.
5.      When you are finished making changes to your privacy settings, click OK.

Hide content Where can I find more information about protecting my computer and my privacy when I'm online?

Visit the Microsoft Security website or the Microsoft Protect your PC website.

See also

Cookies: frequently asked questions

Here are answers to some common questions about cookies.

Hide content What are cookies used for?

Websites use cookies to offer a personalized experience to users and to gather information about website use. Many websites also use cookies to store information that provides a consistent experience between sections of the site, such as a shopping cart or customized pages. With a trusted website, cookies can enrich your experience by allowing the site to learn your preferences or allowing you to skip having to sign in every time you go to the website. However, some cookies, such as those saved by banner ads, might put your privacy at risk by tracking sites you visit.

Hide content Can I block cookies?

Yes, you can block or allow cookies on all websites or you can choose which websites' cookies are allowed. For more information, see Block or allow cookies.

Hide content Should I block all cookies?

Not necessarily. Blocking all cookies can help protect your privacy, but it might limit your experience on some websites. Be selective about which websites you allow cookies for. You can start by blocking all cookies, then allow cookies as needed for websites that you trust.

Hide content How do I delete cookies?

To delete cookies

2.      Click the Tools button, and then click Internet Options.
3.      On the General tab, under Browsing history, click Delete.
4.      Click Delete Cookies, and then click Yes.
5.      Click Close, and then click OK.

Note

·         Deleting all cookies might cause some webpages to work incorrectly.

Hide content What are Temporary cookies?

Temporary, or session, cookies are removed from your computer after you close Internet Explorer. Websites use them to store temporary information, such as items in your shopping cart.

Hide content What are Persistent cookies?

Persistent, or saved, cookies remain on your computer after you close Internet Explorer. Websites use them to store information, such as your sign-in name and password, so that you don't have to sign in each time you go to a particular site. Persistent cookies can remain on your computer for days, months, or even years.

Hide content What are First-party cookies?

First-party cookies come from the website that you're viewing and can be either persistent or temporary. Websites might use these cookies to store information that they'll reuse the next time you go to that site.

Hide content What are Third-party cookies?

Third-party cookies come from other websites' advertisements (such as pop-up or banner ads) on the website that you're viewing. Websites might use these cookies to track your web use for marketing purposes.

See also


Delete webpage history

As you browse the web, Internet Explorer stores information about the websites you visit and information that you're frequently asked to provide (for example, your name and address). The following is a list of the type of information that Internet Explorer stores:
·         Temporary Internet files
·         Cookies
·         A history of the websites you've visited
·         Information that you've entered into websites or the Address bar (this includes things such as your name, address, and the website addresses that you've visited before)
·         Saved web passwords
·         Temporary information stored by browser add-ons.
Usually, it's helpful to have this information stored on your computer because it can improve web browsing speed or automatically provide information so you don't have to type it in over and over. You might want to delete that information if you're cleaning up your computer or are using a public computer and do not want any of your personal information to be left behind.

Hide content To delete all information

2.      Click the Tools button, and then click Delete Browsing History.
3.      Click Delete all, and then click Yes.

Hide content To delete a specific category of information

2.      Click the Tools button, and then click Delete Browsing History.
3.      Click the Delete button next to the category of information you want to delete, click Yes, and then click Close.

Notes

·         You should close Internet Explorer when you're done to clear cookies that are still in memory from your current browsing session. This is especially important when using a public or kiosk computer.
·         Deleting all browsing history does not delete your list of favorites or subscribed feeds. It only deletes temporary files, browsing history, cookies, saved form information, and saved passwords.

See also





No comments: