防火墙

安全策略阻止即可

写安全策略

您好，web不好操作，建议命令行设置，参考

acl advanced 3999
description gaoweiduankou_lanjie
rule 0 deny tcp destination-port eq 135
rule 1 deny tcp destination-port eq 137
rule 2 deny tcp destination-port eq 138
rule 3 deny tcp destination-port eq 139
rule 4 deny tcp destination-port eq 445
rule 5 deny tcp destination-port eq 3389

rule 6 deny udp destination-port eq 135
rule 7 deny udp destination-port eq 137
rule 8 deny udp destination-port eq 138
rule 9 deny udp destination-port eq 139
rule 10 deny udp destination-port eq 445
rule 11 deny udp destination-port eq 3389


rule 12 deny tcp source-port eq 135
rule 13 deny tcp source-port eq 137
rule 14 deny tcp source-port eq 138
rule 15 deny tcp source-port eq 139
rule 16 deny tcp source-port eq 445
rule 17 deny tcp source-port eq 3389

rule 18 deny udp source-port eq 135
rule 19 deny udp source-port eq 137
rule 20 deny udp source-port eq 138
rule 21 deny udp source-port eq 139
rule 22 deny udp source-port eq 445
rule 23 deny udp source-port eq 3389

quit

int gi 1/0/1

packet-filter 3999 inbound

packet-filter 3999 outbound

quit

建议使用安全策略；

新建一个策略放到最前面；

新建一个object-group 添加高危端口；

在安全策略里调用object-group ，动作设置为drop

=====