Windows Server Hardening for D3 Agent

Last Updated: October 23, 2026

att_50_for_15007789.png

The Proxy Agent does not need incoming TCP connections. It always initiates TCP connections to vSOC server and RestfulAPI targets. You can therefore block all incoming connections to the Windows server where the D3 Proxy Agent runs. Run the PowerShell scripts below to disable all the default enabled incoming firewall rules on Windows Server.

att_9_for_15007789.png

att_22_for_15007789.png