To ALLOW ONLY Specific Network To Access:

There is a underlying policy's under the policies: deny all
what we need to do is create the explicit allow policies

what we need to do:

  1. under the inbound scope:
  2. disable all of other allow rules or connections will still make it through from them

  3. run the command below
    netsh advfirewall firewall add rule name="Allow from Internal Access" dir=in action=allow protocol=ANY remoteip=172.16.11.0/24
    172.16.15.0/24
    172.16.10.0/24
    172.16.30.0/24
    Or powershell:
    New-NetFirewallRule -Name Allow192.0.2.55 -DisplayName 'Allow from 192.0.2.55' -Enabled True -Direction Inbound -Protocol ANY -Action Allow -Profile ANY -RemoteAddress 172.16.15.0/24

  4. Restart the Firewall service after creating the rules