Since most people have external firewalls, I find that most customers comletely disable all three in Windows. You still need to obviously poke holes somewhere, but better to not have to manage it per server unless you script it all out.
Since most people have external firewalls, I find that most customers comletely disable all three in Windows. You still need to obviously poke holes somewhere, but better to not have to manage it per server unless you script it all out.