In Windows, how do I configure the firewall to allow pings?

If you have the Windows Firewall enabled, ping requests are blocked by default. This prevents the University Information Security Office (UISO) external system scanner from functioning. To configure the Windows Firewall to allow pings, follow the appropriate instructions below.

Note: You may be prompted for administrative access to complete these steps.

Windows 8

Note: For help navigating in Windows 8, see About views in Windows (Start screen/menu, Control Panel) and Microsoft's Windows 8 FAQ.

1. Press Win-q  and select Control Panel. Alternatively, in Desktop view, move the mouse to the bottom right corner of the screen and select Settings, followed by Control Panel.
   
   
2. Select Systems and Security, and then Windows Firewall.
   
   
3. Click Advanced Settings on the left.
   
   
4. From the left pane of the resulting window, click Inbound Rules.
   
   
5. In the right pane, find the rules titled File and Printer Sharing (Echo Request - ICMPv4-In).
   
   
6. Right-click each rule and choose Enable Rule.

Windows 7

1. From the Start menu, search for Windows Firewall with Advanced Security. Click it to bring up the application.
   
   
2. From the left pane, click Inbound Rules.
   
   
3. In the right pane, find the rules titled File and Printer Sharing (Echo Request - ICMPv4-In).
   
   
4. Right-click each rule and choose Enable Rule.

Windows Vista

1. From the Start menu, search for Windows Firewall with Advanced Security. Click it to bring up the application.
   
   
2. From the left pane, click Inbound Rules.
   
   
3. In the right pane, find the rule titled Networking - Echo Request (ICMPv4-In).
   
   
4. Right-click the rule and choose Enable Rule.

Windows XP SP2 or greater

1. From the Start menu, select either Control Panel, or Settings and then Control Panel. Click or double-click Network Connections to open the Network Connections window.
   
   
2. In the Network Connections window, right-click the icon for your primary Internet connection and select Properties. For example, if you connect using an Ethernet cable, right-click Local Area Connection; if you connect using VPN or dial-up, right-click Virtual Private Network or Dial-up Connection.
   
   
3. On the Advanced tab, under "Windows Firewall", click Settings... .
   
   
4. The Windows Firewall panel will open. On the Advanced tab, under "ICMP", click Settings... .
   
   
5. The ICMP Settings window will open. Check Allow incoming echo request.
   
   
6. Click OK three times.

Third-party firewalls

If you use a third-party firewall program or appliance, refer to the UISO scanner FAQ.

Because each third-party firewall is uniquely configured, it is impossible to cover all possible ways of enabling ping on all possible firewalls. However, you can use the following information to determine how to configure your firewall:

• Many firewalls can exempt certain IP addresses or ranges from being blocked. Find the IP ranges for UISO scanners in the scanner FAQ.
  
  
• Some firewalls exempt certain protocols or services. In those cases, you must enable ping. Some firewalls call the setting "ping", or "incoming ping". Others refer to it by its technical name, "ICMP Echo Reply". Either way, allow this protocol.
  
  
• Many firewalls also offer options to allow certain ports to communicate (do not confuse networking TCP ports with the physical serial, parallel, USB, or Ethernet ports). Don't bother configuring those settings for the UISO scanner; only "ping" (ICMP_Echo_Reply) must be enabled, and that doesn't use ports. You may want to allow or deny certain ports for other reasons, but there's little need to do so for the UISO scanner.