为 Windows 防火墙以外的其他防火墙产品添加防火墙例外 - 例如 Norman、Norton 等
我有一个 WiX 安装程序项目，其中使用 WiX 防火墙异常。当客户端计算机使用 Windows 防火墙时，这非常有效，但我收到一份报告，称用户在使用 Norman 个人防火墙时无法运行该解决方案。与此相关的一些问题：
- 其他防火墙产品通常会遵守添加到 Windows 防火墙的规则吗？如果是这样 - 这只是一个导入还是防火墙产品将始终尊重 Windows 防火墙规则的更改？
- 是否有任何通用方法可以添加防火墙例外，以便所有/许多防火墙在安装过程中都会尊重它们，例如 WiX 中的防火墙扩展？
- 使用 netsh 是否会导致防火墙例外添加到 Windows 防火墙以外的其他产品中？
I have a WiX installer project where I have added two firewall exceptions as part of the installer by using the WiX FirewallException. This works great when the client machine is using Windows Firewall, but I got a report that a user failed to get the solution running when using Norman's Personal Firewall. Some question regarding this:
- Will other firewall products in general respect rules added to the Windows Firewall? If so - is this just an import or will firewall products always respect changes to Windows Firewall rules?
- Are there any generic way to add firewall exceptions so that all/many of the firewalls will respect them during an installer such as the Firewall extensions in WiX?
- Will usage of netsh result in firewall exceptions getting added to other products than Windows Firewall?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
我相信所有这些问题的答案都是“不”、“不”、“不”。这是我什至不尝试在安装中执行任何操作的原因之一。我总是鼓励应用程序开发编写不需要防火墙的系统和/或让系统工程师使用文档来向最终用户正确记录网络需求。只有当每个人都明白这是尽力而为的尝试并且必须提供文档来帮助用户集成到他们的自定义环境时，我才会尝试在安装程序中使用 automagical。那我自然反对在未经用户（真正）同意的情况下对用户操作系统配置设置进行我的方式。
I believe the answer to all of that is no, no and no. This is one of the reasons that I don't even try to do any of this in my installs. I always encourage application development to write systems that don't need massaging of the firewall and/or get the systems engineers to work with documentation to properly document to the end user the networking requirements. I only attempt automagical in the installer if everyone understands it's a best effort attempt and that documentation must be available to assist users in integrating into their custom environment. That and I'm naturally adverse to having my way with users operating system configuration settings without their (true) consent.