I've got a cloud network: 192.168.100.0/24 with:
- Pfsense GW (IPSec site-to-site)
- NIC1 = WAN-IP1 (fully blocked except IPSec)
- NIC2 = 192.168.100.1
- DC (WinServer2016)
- NIC1 = WAN-IP2 (external)
- NIC2 = 192.168.100.2 with Pfsense as GW (internal)
In Windows Network Sharing Center I've disabled the External NIC for obvious security reasons.
However I would like to change my NIC1 & firewall that it can get updates and other important traffic. Why not over the Pfsense? Due to bandwith limitations of my provider and VPS's.
How can I change my external NIC (NIC1 on WinServer2016) to only allow outgoing updates traffic?
edit: Removed suggestion to use Public profile
You can use the PowerShell cmdlets
Get-NetConnectionProfile
to get your connection alias and index andSet-NetConnectionProfile -InterfaceAlias [whatever your alias is] -NetworkCategory Public
to change the profile to public. as per @Lenniey - seems a bit iffy though.