A firewall is an important security component on a Windows VPS because it controls which network connections are allowed to reach or leave the server. Windows Firewall can be configured to allow required services while blocking unnecessary connections.
Correct firewall configuration is particularly important when hosting websites, applications, databases or remote administration services. However, incorrect rules can also prevent legitimate services from working or lock you out of the VPS.
This guide shows you how to access Windows Firewall and create or modify firewall rules on a Windows VPS.
Windows Defender Firewall with Advanced Security provides administrators with control over inbound and outbound network connections. Firewall rules can be configured according to the application, port, protocol or connection profile.
Only ports required by the services running on your VPS should generally be opened. cPanel’s firewall guidance similarly recommends opening only the ports required by the services being used and maintaining a method of accessing the server in case a firewall rule causes a problem.
TABLE OF CONTENTS
IMPORTANT:
Always ensure that your Remote Desktop connection remains available before changing firewall rules. Incorrectly configured rules can prevent remote access to the server
How to Configure Windows Firewall Rules
Step 1: Access Your Windows VPS
1. Login to your Domains.co.za Customer Portal using your username and password.
2. Open the Manage Services drop-down menu.
3. Select VPS Hosting.
4. Click Manage next to the VPS you wish to configure.
5. Use the VPS access details to connect to the Windows VPS through Remote Desktop.
Step 2: Open Windows Defender Firewall
1. Connect to your Windows VPS using Remote Desktop.
2. Open the Windows Start menu.
3. Search for Windows Defender Firewall with Advanced Security.
4. Open the firewall management console.
Step 3: Create an Inbound Rule
1. Select Inbound Rules from the left-hand menu.
2. Click New Rule in the Actions panel.
3. Select the rule type required for the service.
4. Specify the required port, programme or connection settings.
5. Select Allow the connection if the service needs to accept the connection.
6. Choose the appropriate network profiles.
7. Enter a descriptive name for the rule.
8. Click Finish to create the rule.
Step 4: Create an Outbound Rule
1. Select Outbound Rules from the left-hand menu.
2. Click New Rule in the Actions panel.
3. Select the required rule type.
4. Specify the application, port or connection settings.
5. Select the required action for the connection.
6. Choose the applicable network profiles.
7. Give the rule a descriptive name.
8. Click Finish to save the rule.
Step 5: Test the Firewall Rule
1. Test the service or application affected by the firewall rule.
2. Confirm that legitimate connections are working as expected.
3. Verify that unwanted connections remain blocked.
4. If the service does not work, review the rule and confirm that the correct port, protocol and profile were selected.
Step 6: Review Existing Rules
1. Return to Inbound Rules or Outbound Rules.
2. Locate the rule you created.
3. Confirm that the rule is enabled.
4. Disable or remove obsolete rules that are no longer required.
Troubleshooting
- I Can No Longer Connect to the VPS: Review the firewall rules from an available console or recovery method and ensure that the required remote administration connection is permitted.
- The Application Cannot Connect: Confirm that the correct port, protocol and direction were configured.
- A Port Is Still Blocked: Check for other firewall rules or external network restrictions that may be affecting the connection.
- The Rule Works on One Network but Not Another: Review the network profile assigned to the firewall rule.
Additional Information
- Windows Firewall controls network connections to and from the Windows VPS.
- Only ports required by your applications and services should generally be opened.
- Firewall rules should have clear names so they can be identified and managed later.
- Always ensure that your remote administration connection remains available before changing firewall settings.
- Opening unnecessary ports can increase the attack surface of your VPS.
- Firewall rules can be configured for specific applications, ports, protocols and network profiles.
- Test new firewall rules after creating them to confirm that required services remain accessible.
- Regularly review and remove firewall rules that are no longer required.
- If you are unsure whether a port is required, check the documentation for the application or service before opening it.
- Domains.co.za recommends maintaining a method of accessing a server when making firewall changes so that you can recover if a rule prevents normal access.
Login to Domains.co.za Account
1. Go to the Domains.co.za website Account Login page.
2. Enter your Email and Password and click the Sign In button.
3. You will see the Domains.co.za Dashboard, displaying the Manage Account menu on the left and your Account Information, Account Overview and Open Support Tickets on the right.
