Skip to main content

Access a Windows EC2 Machine Through Windows Firewall

PleaseLast findreviewed: belowSeptember 25, 2026

Use this article whichwhen explainsa inlocal details on what stepsmachine needs to bereach followed.
a To Access an windowsWindows EC2 machineinstance whichthat has windowsWindows Firewall "ON"
enabled.

Please

What followchanged in this article

  • Corrected the stepstitle mentionedgrammar belowand made the scope specific to access anWindows EC2 machineconnectivity.
  • Added withchecks for AWS security groups, Windows Firewall "ON"
    inbound Step1:
    rules, LoginRDP/WinRM ports, and source IP restrictions.
  • Added caution to avoid opening broad public access just to make a troubleshooting step pass.

Validation workflow

  1. Confirm the EC2 machinesecurity group allows the required port from the local source IP.
  2. Confirm Windows Firewall allows the same service inside the instance.
  3. Test connectivity with the usernameapproved access method and password.then Oncenarrow loggedany intemporary successfullyrule navigatechanges.
to

Review Controlnote: Panel\System and Security and click "Windows Firewall".
 
 Step 2:
 OnceKept the userarticle hasas navigatedoperational insideguidance "Windows Firewall", on the left handside user will have an option named "Advanced Settings" click that.
 
 Step 3:
 Once the user has navigated to Advanced settings, User should click "Inbound Rule" and on the right hand side user should get an option to create a "New Rule" and clicks on it
 
 Step 4:
 User Clicks on "Custom rule" and clicks on Next
 
 Step 5:
 User selects on " All Programs" and clicks on Next
 
 Step 6:
 User chooses the "Protocol Type" from the dropdown. In our case we will be opting for "TCP" since we need to access application over internet. Also User can also select ports for which this rule can be applied(For Ex: if we select 80, user can only access port 80 and so on). After making the changes the user clicks on next
 
 Step 7:
 User clicks on the "Add" under "which remote IP address needs to be added. User should also need to know what public IP address is. User obtains the Public IP address and enters it and clicks on Next.
 
 Note: After the IP address, you don't specify "/0". If you do, every computer in the world would have access to that port. To restrict access to a single address specify "/32" after the IP. (If you want to know why, read the following article: http://en.wikipedia.org/wiki/CIDR.)
 Step 8:
 User clicks on allowing the connection and clicks on next
 
 Step 9:
 User does not make any changes in this step and click "Next".

 
 Step 10:
 User enters a name for this rule and clicks on Finish.
 
 User Verifies whether the rule has beenbut added undersecurity Firewall
guardrails
around Userfirewall tries to access the below
 URL :http://EC2 URL:8080/Appvance/login.html
 User should be able to navigate to the URL successfullychanges.




Last updated: JulySeptember 28,25, 20232026

If you have any feedback on this topic, please contact us at documentation@appvance.ai.