Firewall de Windows Defender: permitir excepciones de ICMP: valor del Registro AllowOutboundDestinationUnreachable y 9 más (DomainProfile\IcmpSettings)EquipoHKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings
- Id. de directiva
- WF_IcmpSettings_Name_1
- Ámbito
- Configuración del equipo
- Compatible con
- Al menos Windows XP Professional con SP2
- Origen
- Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (versión 1.0)
- Categoría
- Red › Conexiones de red › Firewall de Windows Defender › Perfil de dominio
Registro
AllowOutboundDestinationUnreachable
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir destino inalcanzable saliente
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowOutboundDestinationUnreachable"=dword:00000001 ; Sin marcar "AllowOutboundDestinationUnreachable"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundDestinationUnreachable" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundDestinationUnreachable" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundDestinationUnreachable' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundDestinationUnreachable' -PropertyType DWord -Value 0 -Force | Out-Null
AllowOutboundSourceQuench
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir paquete de control de flujo (source quench) saliente
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowOutboundSourceQuench"=dword:00000001 ; Sin marcar "AllowOutboundSourceQuench"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundSourceQuench" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundSourceQuench" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundSourceQuench' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundSourceQuench' -PropertyType DWord -Value 0 -Force | Out-Null
AllowRedirect
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir redirección
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowRedirect"=dword:00000001 ; Sin marcar "AllowRedirect"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowRedirect" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowRedirect" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowRedirect' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowRedirect' -PropertyType DWord -Value 0 -Force | Out-Null
AllowInboundEchoRequest
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir petición eco entrante
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowInboundEchoRequest"=dword:00000001 ; Sin marcar "AllowInboundEchoRequest"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundEchoRequest" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundEchoRequest" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundEchoRequest' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundEchoRequest' -PropertyType DWord -Value 0 -Force | Out-Null
AllowInboundRouterRequest
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir petición de enrutador entrante
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowInboundRouterRequest"=dword:00000001 ; Sin marcar "AllowInboundRouterRequest"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundRouterRequest" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundRouterRequest" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundRouterRequest' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundRouterRequest' -PropertyType DWord -Value 0 -Force | Out-Null
AllowOutboundTimeExceeded
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir tiempo de salida excedido
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowOutboundTimeExceeded"=dword:00000001 ; Sin marcar "AllowOutboundTimeExceeded"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundTimeExceeded" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundTimeExceeded" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundTimeExceeded' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundTimeExceeded' -PropertyType DWord -Value 0 -Force | Out-Null
AllowOutboundParameterProblem
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir problema de parámetro saliente
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowOutboundParameterProblem"=dword:00000001 ; Sin marcar "AllowOutboundParameterProblem"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundParameterProblem" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundParameterProblem" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundParameterProblem' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundParameterProblem' -PropertyType DWord -Value 0 -Force | Out-Null
AllowInboundTimestampRequest
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir petición de marca de tiempo entrante
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowInboundTimestampRequest"=dword:00000001 ; Sin marcar "AllowInboundTimestampRequest"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundTimestampRequest" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundTimestampRequest" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundTimestampRequest' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundTimestampRequest' -PropertyType DWord -Value 0 -Force | Out-Null
AllowInboundMaskRequest
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir petición de máscara entrante
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowInboundMaskRequest"=dword:00000001 ; Sin marcar "AllowInboundMaskRequest"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundMaskRequest" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowInboundMaskRequest" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundMaskRequest' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowInboundMaskRequest' -PropertyType DWord -Value 0 -Force | Out-Null
AllowOutboundPacketTooBig
REG_DWORDEquipo- Marcada
- 1
- Sin marcar
- 0
- Elemento
- Permitir paquete saliente demasiado grande
- Tipo de valor
- REG_DWORD
Aplicar con .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00 [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings] ; Opciones (usar solo una) ; Marcada "AllowOutboundPacketTooBig"=dword:00000001 ; Sin marcar "AllowOutboundPacketTooBig"=dword:00000000
CMD
:: Opciones (usar solo una) :: Marcada reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundPacketTooBig" /t REG_DWORD /d 1 /f :: Sin marcar reg add "HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings" /v "AllowOutboundPacketTooBig" /t REG_DWORD /d 0 /f
PowerShell
# Común: crear la clave New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Force | Out-Null # Opciones (usar solo una) # Marcada New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundPacketTooBig' -PropertyType DWord -Value 1 -Force | Out-Null # Sin marcar New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\IcmpSettings' -Name 'AllowOutboundPacketTooBig' -PropertyType DWord -Value 0 -Force | Out-Null