📎 AI Summary:
The thread discusses how to add multiple IP security rules on a Windows system to allow access to specific DNS names, with the original poster seeking PowerCLI commands for automation. The responses suggest that managing such rules might be more efficient at the perimeter firewall rather than locally, and the original poster clarifies they are working within an existing block internet policy on Windows. The overall tone is technical, exploring options for effective network security management.

iqtan

Active Member
Member details
Joined
Jan 5, 2023
Messages
3
Thread Author #1
Hi,
This is my first post and need some help with adding IP security rules to IP security policy.

Setting IP security policies on local computer.

We have already created IP security policy and blocked the internet.
But we need to allow/add certain DNS (WebURL).

rule:
This rule does not specify a tunnel
Network type "All network connections"
Add IP filter list
Name the IP filter list
Add description
Source address as "Any IP address".
Destination address as "a specific DNS Name" and then specify the Hostname.
Select a protocol type as TCP.
Finish.
Allow and then permit the filter.


Question is ...is there any powercli command or script to do as I need to add many "IP security rule".
 

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
Why not just restrict traffic on the perimeter firewall?
 

iqtan

Active Member
Member details
Joined
Jan 5, 2023
Messages
3
Thread Author #3
Thank you.
There is a block internet IP security policy applied at the windows OS level and we apply security rule on the block internet policy so certain web url or IP's are allowed.
Not sure allow/deny from firewall works with the current IP sec policy. I will check thank you.
 

Neemobeer

Windows Forum Team
Staff member
Member details
Joined
Jul 4, 2015
Messages
8,995
I don't know your requirements, but if all systems are within a corporate network the host based blocks are probably unnecessary and could be handled at a border firewall. It is also possible to bypass those local blocks.