You can configure Windows Firewall either locally, using the Windows Firewall With Advanced Security console in the Administrative Tools folder, or using the Computer Configuration\Windows Settings\Security Settings\Windows Firewall With Advanced Security\Windows Firewall With Advanced Security node of a Group Policy Object (GPO). Typically, you will configure policies that apply to groups of computers (including IPsec connection security policies) by using GPOs and edit server-specific policies (such as configuring the range of IP addresses a DNS server accepts queries from) by using local tools.
The sections that follow describe common Windows Firewall configuration tasks.
Firewall Settings with Group Policy
Firewall policies are ...