About the Microsoft Firewall Service

The Microsoft® Firewall service (fwsrv) is a generic, circuit-level proxy for Windows Sockets (Winsock) applications. The Firewall service makes Telnet, e-mail, news, Microsoft Media Player, RealNetworks RealAudio, Internet Relay Chat (IRC), and other Winsock-compatible client applications perform as though they were connected directly to the Internet. The client application makes Winsock application programming interface (API) calls to communicate with an application running on an Internet-based host. The Firewall service redirects the necessary functions to the Forefront TMG computer, thus establishing a communication path from the internal application to the Internet application through the Forefront TMG computer. This redirection eliminates the need for a specific gateway for each protocol, such as Network News Transfer Protocol (NNTP), Simple Mail Transfer Protocol (SMTP), Telnet, or File Transfer Protocol (FTP). The Firewall service allows applications with no built-in support for a proxy to benefit from proxy service without using the protocols.

The Firewall service runs as a stand-alone service on the Microsoft Windows Server™ 2008 operating system. It establishes gateway connections between the Windows Sockets (Winsock) applications on the client and the Internet host. The local network remains secure, because communication is channeled through the Forefront TMG computer. The Firewall service can be enhanced by using application filters.

You can determine whether the Firewall service is running through the FirewallServiceStatus property of the FPCServer object. The Firewall service can be started by calling the StartFirewallService method, and it can be stopped by calling the StopFirewallService method.

The Firewall service can be stopped manually in Forefront TMG Management, or programmatically using a script. The Firewall service can also be shut down when an event signals an alert (an FPCAlert object) that is configured to shut it down. Whenever the Firewall service shuts down, Forefront TMG enters lockdown mode. Lockdown mode combines the need for isolation with the need to stay connected.

In lockdown mode, the following functionality applies:

This section contains the following topics:

Send comments about this topic to Microsoft

Build date: 11/30/2009

© 2008 Microsoft Corporation. All rights reserved.