Create Firewall Rules

Description of the new feature / enhancement

Currently I have an 'App Installer' predefined rule in my Windows Defender Firewall with Advanced Security. The rule allows outbound traffic for the "Microsoft.DesktopAppInstaller_*" app package. However, this rule doesn't seem to cover all executables in the package and winget can still send outbound traffic even if this rule is blocked.

But on the opposite end, if all outbound traffic is blocked in the firewall, winget will not be able to send/receive data even if this rule is enabled. Another rule needs to be defined to give AppInstallerCLI.exe permission for outbound traffic.

Since the path of the AppInstallerCLI.exe changes with every update, it gets quiet bothersome to update the firewall rule every time.

Proposed technical implementation details

• Include AppInstallerCLI.exe in the predefined firewall rule for App Installer.
• Update the corresponding firewall rule with each version update.

Start by locating the predefined App Installer Windows Defender Firewall rule and the version-update handling for AppInstallerCLI.exe. Confirm where the rule is defined and how it is refreshed; done means the rule grants outbound access to AppInstallerCLI.exe and remains correct after each version update.