Adding new applications in Windows Firewall

Adding new applications in Windows Firewall

In Windows Firewall, how would I add new applications named "FTP" using "TCP" port 21?

    Requires Free Membership to View

    When you register, you’ll also receive targeted alerts from my team of editorial writers and independent industry experts with the latest news, tips, and advice to help you do your job more efficiently and effectively. Our goal is to keep you informed on the hottest topics and biggest challenges faced by IT professionals today working with desktop management and security technologies.

    Margie Semilof, Editorial Director

    By submitting your registration information to SearchEnterpriseDesktop.com you agree to receive email communications from TechTarget and TechTarget partners. We encourage you to read our Privacy Policy which contains important disclosures about how we collect and use your registration and other information. If you reside outside of the United States, by submitting this registration information you consent to having your personal data transferred to and processed in the United States. Your use of SearchEnterpriseDesktop.com is governed by our Terms of Use. You may contact us at webmaster@TechTarget.com.

You can accomplish this by opening the Windows Firewall from the control panels and then selecting the Exceptions tab. Click the Add Port button, give the service a friendly name such as FTP, type 21 in the port field and select TCP from the radio buttons. Click OK until you are out of the Windows Firewall dialog. This change should take effect immediately; you will not need to restart your computer.

Alternatively, you can use RegEdit to make this change on your computer or on a remote computer. (You will need administrative rights to do this.)

  1. Open RegEdit on the PC to which you're logged on.
  2. Connect to the remote PC if desired.
  3. Navigate to the following key:
  4. HKEY_LOCAL_MACHINESYSTEM/CurrentControlSet/Services
    /SharedAccess/Parameters/FirewallPolicy/DomainProfile
    /GloballyOpenPorts/List

  5. Create a new string (REG_SZ) value. Name it 21:TCP
  6. Give it the following value: 21:TCP:*:Enabled:FTP
  7. Close RegEdit.

Note that the Registry entry as defined above will permit FTP access to that workstation from all IP addresses (as indicated by the asterisk).

This was first published in October 2007