Firewall Settings for ColdFusion 2021

[phillipd88347257]

We have recently switched from one Antivirus/Firewall app to Windows Defender for Servers.  I tried replicating our settings into Windows Defender Firewall to allow our ColdFusion Webservers to operate.  End result, our sites were unable to be reached.

Can someone provide a complete list of Ports/Port Ranges that require access?

Windows Server 2019 running ColdFusion 2021.  SQL 2019 backend.  Apache webserver.  Traffic comes in as HTTPS (443) to our primary firewall, then using a VIP is transferred to our Load Balancers.  The Load Balancers do SSL Offloading, so the traffic is forwarded to the ColdFusion server on HTTP (80).  I have Firewall rules for both 443 and 80 to allow access.  I also have rules to allow the SQL access using the specific ports we have designated in our Data Sources (Within CFadmin).

Turning off the Defender Firewall allows the websites to work again, so I am apparently missing a rule or two.

Thanks,

Phillip

[BKBK]

From your description it appears that Windows Defender Firewall is being blocked  or is staying in the default setting.

Some suggestions:

1.  Make sure that the previous Antivirus/Firewall is completely uninstalled. One way to do so is to install and run the free tool, Bulk Crap Uninstaller.* Inspect the list of software that it finds. In particular, check whether there are any components of the previous Antivirus/Firewall that still remain on the server. If there are, let Bulk Crap remove them.
2.  Getting Windows Defender Firewall to restore the settings for your ColdFusion service. You could do this, for example, by
   (a) Restoring Windows Defender Firewall to its default state: Control Panel > Windows Defender Firewall > Restore defaults;
   (b) Restarting Windows (which may automatically restart some ColdFusion-related services); during this step, Windows Defender Firewall may show you a dialog box asking you to allow access;
   (c) Restarting any ColdFusion-related services, where necessary;  during this step, Windows Defender Firewall may show you a dialog box asking you to allow access.
   
   
   
   --------
   * Bulk Crap Uninstaller is Open Source. If it has been of use to you, consider making a donation, as a token of support for the developer.