Powershell reguły Firewall dla SQL -SQL rule for sql

Set-ExecutionPolicy -ExecutionPolicy RemoteSigned

#poszukujemy jakie są insancje i gdzie jest SqLserwer.exe

Get-CimInstance Win32_Service |
Where-Object {
$_.Name -like „MSSQL*” -and $_.PathName -match „sqlservr.exe”
} |
ForEach-Object {

$exe = [regex]::Match($_.PathName,’^”?(.*?)”?(?=\s-|$)’).Groups[1].Value

if (Test-Path $exe)
{
New-NetFirewallRule `
-DisplayName „SQL Server plik_exe- $($_.Name)” `
-Direction Inbound `
-Program $exe `
-Action Allow `
-Profile Domain,Private `
-ErrorAction SilentlyContinue

Write-Host „Dodano regułę dla $($_.Name)”
}
}

#Enabling SQL Server Ports

New-NetFirewallRule -DisplayName “SQL Server” -Direction Inbound –Protocol TCP –LocalPort 1433 -Action allow
New-NetFirewallRule -DisplayName “SQL Admin Connection” -Direction Inbound –Protocol TCP –LocalPort 1434 -Action allow
New-NetFirewallRule -DisplayName “SQL Database Management” -Direction Inbound –Protocol UDP –LocalPort 1434 -Action allow
New-NetFirewallRule -DisplayName “SQL Service Broker” -Direction Inbound –Protocol TCP –LocalPort 4022 -Action allow
New-NetFirewallRule -DisplayName “SQL Debugger/RPC” -Direction Inbound –Protocol TCP –LocalPort 135 -Action allow
#Enabling SQL Analysis Ports
New-NetFirewallRule -DisplayName “SQL Analysis Services” -Direction Inbound –Protocol TCP –LocalPort 2383 -Action allow
New-NetFirewallRule -DisplayName “SQL Browser” -Direction Inbound –Protocol TCP –LocalPort 2382 -Action allow
#Enabling Misc. Applications
New-NetFirewallRule -DisplayName “HTTP” -Direction Inbound –Protocol TCP –LocalPort 80 -Action allow
New-NetFirewallRule -DisplayName “SSL” -Direction Inbound –Protocol TCP –LocalPort 443 -Action allow
New-NetFirewallRule -DisplayName “SQL Server Browse Button Service” -Direction Inbound –Protocol UDP –LocalPort 1433 -Action allow
#Enable Windows Firewall
Set-NetFirewallProfile -DefaultInboundAction Block -DefaultOutboundAction Allow -NotifyOnListen True -AllowUnicastResponseToMulticast True

New-NetFirewallRule `
-DisplayName „SQL Server Program” `
-Direction Inbound `
-Program „C:\Program Files\Microsoft SQL Server\MSSQL16.MSSQLSERVER\MSSQL\Binn\sqlservr.exe” `
-Action Allow `
-Profile Private

———-DIAGNOZA

Get-NetFirewallRule -DisplayName "SQL Server" | Get-NetFirewallProfile

Get-NetFirewallRule -DisplayName "SQL Server" | Format-List *

9.

Sprawdź, co blokuje Firewall

Możesz włączyć logowanie:

Set-NetFirewallProfile `
-LogBlocked True `

-LogFileName ":\!!!! LOG !!!\pfirewall.log"