My client wants to use the built in firewall on 2008 R2 in addition to his normal company firewalls. Has anyone done this in a production env. and if so any tips on what to look for to make best use of this feature?

Are you talking about Windows Firewall? http://technet.microsoft.com/en-us/network/bb545423.aspx It is enabled my default. What is your concern? Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX This posting is provided AS IS with no warranties, and confers no rights. http://publications.sivarajan.com/

Yes i realize it is enabled but they actually want to configure it and not just leave as is-i was wondering if anyone has chnaged the config around and might have some tips on best practices when doing so.

Has anyone done this in a production env. and if so any tips on what to look for to make best use of this feature? I recommand to you to open only the needed ports on the firewall. Have a look to this article, it is about "How to Configure the new Windows Server 2008 advanced Firewall MMC snap-in": http://www.windowsnetworking.com/articles_tutorials/configure-Windows-Server-2008-advanced-firewall-MMC-snap-in.html This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

Yes i realize it is enabled but they actually want to configure it and not just leave as is-i was wondering if anyone has chnaged the config around and might have some tips on best practices when doing so. I have an old Microsoft article about the Best Practices for Securing Windows Firewall. I recommand to you to have a look at it, it is so interesting. http://technet.microsoft.com/en-us/library/cc776368%28WS.10%29.aspx This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.

That is based on your requirements. Mr X has provided a couple of good artilces.. Santhosh Sivarajan | MCTS, MCSE (W2K3/W2K/NT4), MCSA (W2K3/W2K/MSG), CCNA, Network+ Houston, TX This posting is provided AS IS with no warranties, and confers no rights. http://publications.sivarajan.com/