{"id":140,"title":"Windows Firewall Yap\u0131land\u0131rmas\u0131 i\u00e7in GPO Kullan\u0131m\u0131","content":"Group Policy Object (GPO) kullanarak, domain ortam\u0131ndaki istemci bilgisayarlar\u0131n Windows Firewall yap\u0131land\u0131rmalar\u0131n\u0131 merkezi olarak y\u00f6netmek m\u00fcmk\u00fcnd\u00fcr. Bu yaz\u0131da, Windows Firewall'u GPO ile nas\u0131l devre d\u0131\u015f\u0131 b\u0131rakabilece\u011finizi ve \u00e7e\u015fitli firewall yap\u0131land\u0131rmalar\u0131n\u0131 nas\u0131l uygulayabilece\u011finizi ad\u0131m ad\u0131m anlataca\u011f\u0131m.

GPO ile Windows Firewall Y\u00f6netimi<\/h2> Windows Firewall, g\u00fcvenlik a\u00e7\u0131s\u0131ndan \u00f6nemli bir bile\u015fen olsa da, test ortamlar\u0131, belirli uygulamalar\u0131n \u00e7al\u0131\u015fmas\u0131 veya di\u011fer g\u00fcvenlik \u00e7\u00f6z\u00fcmlerinin kullan\u0131lmas\u0131 gibi \u00e7e\u015fitli durumlarda devre d\u0131\u015f\u0131 b\u0131rak\u0131lmas\u0131 gerekebilir. Ancak penetrasyon testleri s\u0131ras\u0131nda genellikle firewall'un aktif olmas\u0131 istendi\u011fini unutmay\u0131n.

GPO ile Windows Firewall'u Devre D\u0131\u015f\u0131 B\u0131rakma Ad\u0131mlar\u0131<\/h3>
  1. Group Policy Management Console'u A\u00e7\u0131n<\/strong>
    • Server Manager > Tools > Group Policy Management<\/li> <\/ul> <\/li>
    • Yeni GPO Olu\u015fturun<\/strong>
      • Forest > Domains > > Group Policy Objects konteynerini se\u00e7in<\/li>
      • Sa\u011f t\u0131klay\u0131n ve \"New\" se\u00e7ene\u011fini t\u0131klay\u0131n<\/li>
      • GPO'ya anlaml\u0131 bir isim verin (\u00f6rn. \"Firewall-Configuration\")<\/li> <\/ul> <\/li>
      • GPO'yu D\u00fczenleyin<\/strong>
        • Yeni olu\u015fturdu\u011funuz GPO'ya sa\u011f t\u0131klay\u0131n ve \"Edit\" se\u00e7ene\u011fini t\u0131klay\u0131n<\/li> <\/ul> <\/li>
        • Windows Firewall Ayarlar\u0131na Gidin<\/strong>
          • Computer Configuration > Policies > Windows Settings > Security Settings > Windows Defender Firewall with Advanced Security > Windows Defender Firewall with Advanced Security - LDAP yolunu takip edin<\/li> <\/ul> <\/li>
          • Firewall'u Devre D\u0131\u015f\u0131 B\u0131rak\u0131n<\/strong>
            • Windows Defender Firewall Properties'i t\u0131klay\u0131n<\/li>
            • Domain Profile, Private Profile ve Public Profile sekmeleri i\u00e7in a\u015fa\u011f\u0131daki ayarlar\u0131 yap\u0131n:
              • Firewall State: Off<\/li>
              • Inbound Connections: Allow<\/li>
              • Outbound Connections: Allow<\/li> <\/ul> <\/li>
              • Apply ve OK d\u00fc\u011fmelerine t\u0131klay\u0131n<\/li> <\/ul> <\/li>
              • GPO'yu Hedef OU'ya Ba\u011flay\u0131n<\/strong>
                • GPO'yu uygulamak istedi\u011finiz OU'ya gidin (\u00f6rn. bilgisayarlar\u0131n bulundu\u011fu OU)<\/li>
                • OU'ya sa\u011f t\u0131klay\u0131n ve \"Link an Existing GPO\" se\u00e7ene\u011fini t\u0131klay\u0131n<\/li>
                • Olu\u015fturdu\u011funuz \"Firewall-Configuration\" GPO'sunu se\u00e7in<\/li> <\/ul> <\/li> <\/ol>

                  Windows Firewall i\u00e7in Geli\u015fmi\u015f Yap\u0131land\u0131rmalar<\/h3>

                  1. Belirli Portlar\u0131 A\u00e7ma<\/h4> T\u00fcm firewall'u devre d\u0131\u015f\u0131 b\u0131rakmak yerine, sadece belirli portlar\u0131 a\u00e7abilirsiniz:
                  1. \"Windows Defender Firewall with Advanced Security - LDAP\" \u00fczerine sa\u011f t\u0131klay\u0131n<\/li>
                  2. \"Inbound Rules\" se\u00e7ene\u011fini t\u0131klay\u0131n<\/li>
                  3. Sa\u011f panel men\u00fcs\u00fcnden \"New Rule\" se\u00e7ene\u011fini t\u0131klay\u0131n<\/li>
                  4. \"Port\" se\u00e7ene\u011fini i\u015faretleyin ve \"Next\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li>
                  5. TCP veya UDP protokol\u00fcn\u00fc se\u00e7in<\/li>
                  6. \"Specific local ports\" se\u00e7ene\u011fini i\u015faretleyin ve a\u00e7mak istedi\u011finiz portu girin (\u00f6rn. 3389 RDP i\u00e7in)<\/li>
                  7. \"Allow the connection\" se\u00e7ene\u011fini i\u015faretleyin ve \"Next\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li>
                  8. Kural\u0131n hangi profiller i\u00e7in ge\u00e7erli olaca\u011f\u0131n\u0131 se\u00e7in<\/li>
                  9. Kurala bir isim ve a\u00e7\u0131klama verin<\/li>
                  10. \"Finish\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <\/ol>

                    2. Belirli Uygulamalara \u0130zin Verme<\/h4> Belirli uygulamalar\u0131n firewall'dan ge\u00e7mesine izin vermek i\u00e7in:
                    1. \"Inbound Rules\" \u00fczerine sa\u011f t\u0131klay\u0131n ve \"New Rule\" se\u00e7ene\u011fini t\u0131klay\u0131n<\/li>
                    2. \"Program\" se\u00e7ene\u011fini i\u015faretleyin ve \"Next\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li>
                    3. \"This program path\" se\u00e7ene\u011fini i\u015faretleyin ve uygulaman\u0131n yolunu girin (\u00f6rn. %ProgramFiles%\\Application\\app.exe<\/code>)<\/li>
                    4. \"Allow the connection\" se\u00e7ene\u011fini i\u015faretleyin ve \"Next\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li>
                    5. Profilleri se\u00e7in ve kurala bir isim verin<\/li>
                    6. \"Finish\" d\u00fc\u011fmesine t\u0131klay\u0131n<\/li> <\/ol>

                      3. IP Adreslerine G\u00f6re K\u0131s\u0131tlama<\/h4> Belirli IP adreslerinden gelen trafi\u011fi engellemek veya izin vermek i\u00e7in:
                      1. Yeni bir kural olu\u015fturun (Port veya Program tabanl\u0131)<\/li>
                      2. Kural olu\u015fturma sihirbaz\u0131nda \"Scope\" a\u015famas\u0131na geldi\u011finizde<\/li>
                      3. \"Remote IP addresses\" b\u00f6l\u00fcm\u00fcnde, \"These IP addresses\" se\u00e7ene\u011fini i\u015faretleyin<\/li>
                      4. \"Add\" d\u00fc\u011fmesine t\u0131klayarak IP adreslerini veya IP aral\u0131klar\u0131n\u0131 ekleyin<\/li> <\/ol>

                        Penetrasyon Testleri \u0130\u00e7in \u00d6neriler<\/h2> Penetrasyon testleri s\u0131ras\u0131nda, ger\u00e7ek bir ortam\u0131 sim\u00fcle etmek i\u00e7in firewall'un genellikle a\u00e7\u0131k olmas\u0131 istenir. Bu durumda \u015fu yakla\u015f\u0131mlar\u0131 uygulayabilirsiniz:
                        1. Test i\u00e7in Ayr\u0131 GPO<\/strong>
                          • Penetrasyon testi i\u00e7in ayr\u0131 bir GPO olu\u015fturun<\/li>
                          • Firewall'u a\u00e7\u0131k tutun ancak belirli portlar\u0131 veya servisleri a\u00e7\u0131n<\/li>
                          • Bu GPO'yu sadece test edilecek bilgisayarlar\u0131n bulundu\u011fu OU'ya ba\u011flay\u0131n<\/li> <\/ul> <\/li>
                          • WMI Filtrelemesi<\/strong>
                            • GPO'lara WMI filtreleri ekleyerek belirli bilgisayarlar\u0131 hedefleyin<\/li>
                            • \u00d6rnek WMI Sorgusu: SELECT * FROM Win32_ComputerSystem WHERE Name LIKE \"TEST-%\"<\/code><\/li> <\/ul> <\/li>
                            • Ge\u00e7ici Politika De\u011fi\u015fiklikleri<\/strong>
                              • Test s\u0131ras\u0131nda de\u011fi\u015fiklikleri ge\u00e7ici olarak uygulay\u0131n<\/li>
                              • Test tamamland\u0131ktan sonra normal g\u00fcvenlik politikalar\u0131na d\u00f6n\u00fcn<\/li> <\/ul> <\/li> <\/ol>

                                GPO Uygulanma Durumunu Kontrol Etme<\/h2> Firewall ayarlar\u0131n\u0131n ba\u015far\u0131yla uyguland\u0131\u011f\u0131n\u0131 kontrol etmek i\u00e7in:
                                1. \u0130stemci bilgisayarda komut istemini y\u00f6netici olarak a\u00e7\u0131n<\/li>
                                2. gpupdate \/force<\/code> komutunu \u00e7al\u0131\u015ft\u0131r\u0131n<\/li>
                                3. gpresult \/r<\/code> komutunu \u00e7al\u0131\u015ft\u0131rarak uygulanan GPO'lar\u0131 kontrol edin<\/li>
                                4. Windows Defender Firewall durumunu kontrol etmek i\u00e7in: 
                                  netsh advfirewall show allprofiles <\/code><\/pre> <\/li> <\/ol> 
                                  G\u00fcvenlik Uyar\u0131s\u0131<\/h2> Windows Firewall'u tamamen devre d\u0131\u015f\u0131 b\u0131rakmak, g\u00fcvenlik risklerini art\u0131rabilir. Bu nedenle: 
                                     
                                  • Firewall'u yaln\u0131zca gerekti\u011finde ve kontroll\u00fc ortamlarda devre d\u0131\u015f\u0131 b\u0131rak\u0131n<\/li> 
                                  • M\u00fcmk\u00fcnse t\u00fcm firewall'u devre d\u0131\u015f\u0131 b\u0131rakmak yerine belirli portlar veya uygulamalar i\u00e7in istisnalar olu\u015fturun<\/li> 
                                  • Test veya sorun giderme tamamland\u0131ktan sonra normal g\u00fcvenlik ayarlar\u0131na geri d\u00f6n\u00fcn<\/li> 
                                  • \u0130nternet'e do\u011frudan ba\u011fl\u0131 bilgisayarlar i\u00e7in firewall'u devre d\u0131\u015f\u0131 b\u0131rakmaktan ka\u00e7\u0131n\u0131n<\/li> <\/ul> Windows Firewall'u GPO ile y\u00f6netmek, BT y\u00f6neticilerine a\u011f genelinde tutarl\u0131 g\u00fcvenlik politikalar\u0131 uygulama esnekli\u011fi sa\u011flar. Ancak bu g\u00fc\u00e7l\u00fc ara\u00e7, g\u00fcvenlik ve i\u015flevsellik aras\u0131nda uygun dengeyi sa\u011flayacak \u015fekilde dikkatli bir \u015fekilde kullan\u0131lmal\u0131d\u0131r.","excerpt":"Group Policy Object (GPO) kullanarak, domain ortam\u0131ndaki istemci bilgisayarlar\u0131n Windows Firewall yap\u0131land\u0131rmalar\u0131n\u0131 merkezi olarak y\u00f6netmek...","created_at":"2025-04-02 21:50:24","updated_at":"2026-09-07 08:21:01","category_id":8,"view_count":766,"reading_time":5,"status":"published","editor_choice":0,"is_editor_choice":0,"published_at":"2025-04-02 21:50:24","featured_image":"resimyok.jpg","slug":"windows-firewall-yapilandirmasi-icin-gpo-kullanimi","category_name":"Active Directory \/Azure","category_slug":"active-directory-azure","category_color":"#f59e0b"}