Using Disable-NetFirewallRule to disable firewall rules by local port number

PowerShell Help
1

Hello. I am trying to disable Windows firewall rules by local port number using powershell with Disable-NetFirewallRule. I checked the documentation of this command but could not find any parameters for local port. Can what I am looking for be done with Disable-NetFirewallRule? Or is there another command that can disable firewall rules by local port number?

2

Try below one, it’s not an efficient solution, but working…

Get-NetFirewallRule | Get-NetFirewallPortFilter | Where-Object -FilterScript {$_.LocalPort -eq $PortNumber} | Disable-NetFirewallRule
3

Thanks that worked. I am curious to know, since the output of:

Get-NetFirewallRule | Get-NetFirewallPortFilter | Where-Object -FilterScript {$_.LocalPort -eq $PortNumber}

Is:

Protocol : TCP
LocalPort : 445
RemotePort : Any
IcmpType : Any
DynamicTarget : Any

How does Disable-NetFirewallRule know how to disable this rule since the name or display name is not part of this output?

4

Get-NetFirewallRule gets all the firewall rules and pass the output to Get-NetFirewallPortFilter cmdlet which will identify the ports used by the rules(if any), Where-Object filters it for the relevant port… hence the final output will be relevant.

5

This is where powershell is kind of an illusion. That’s only the default list view of the Get-NetFirewallPortFilter output. Try piping it to fl *. You can actually pipe it back to Get-NetFirewallRule too. Get-date and select-string have default custom views.

# an example of port 80
Get-NetFirewallRule | Get-NetFirewallPortFilter | 
Where-Object -FilterScript {$_.LocalPort -eq $PortNumber} | Format-List *

Protocol                : TCP
LocalPort               : 80
RemotePort              : Any
IcmpType                : Any
DynamicTarget           : Any
DynamicTransport        : Any
Caption                 :
Description             :
ElementName             :
InstanceID              : WINRM-HTTP-Compat-In-TCP-NoScope
CommunicationStatus     :
DetailedStatus          :
HealthState             :
InstallDate             :
Name                    :
OperatingStatus         :
OperationalStatus       :
PrimaryStatus           :
Status                  :
StatusDescriptions      :
CreationClassName       : MSFT|FW|FirewallRule|WINRM-HTTP-Compat-In-TCP-NoScope
IsNegated               :
SystemCreationClassName :
SystemName              :
PSComputerName          :
CimClass                : root/standardcimv2:MSFT_NetProtocolPortFilter
CimInstanceProperties   : {Caption, Description, ElementName, InstanceID, CommunicationStatus, DetailedStatus, HealthState, InstallDate, Name, OperatingStatus, OperationalStatus,
                          PrimaryStatus, Status, StatusDescriptions, CreationClassName, IsNegated, SystemCreationClassName, SystemName, DynamicTransport, IcmpType, LocalPort,
                          Protocol, RemotePort}
CimSystemProperties     : Microsoft.Management.Infrastructure.CimSystemProperties