Per-Interface rules for Windows Firewall with Advanced Security

Question

I have multiple network interfaces in a computer, and I would like to have individual firewall rules for them.

To achieve that, I put those rules in the three different profiles (Domain, Private, Public) and assign the profiles to the interfaces exactly like said in this question: How do I assign Windows Firewall profiles to network interfaces from the command line?

This means, since per default every interface is assigned to every profile, I just deselect an interface at all profiles but the one it is to be assigned to.

When having done that, in the systray a warning appears that Windows Firewall would be deactivated (and that I should activate it).

Is that just wrong or have I missed anything?

Edit: I did nothing but to exclude all interfaces but one from the "private connection". The exact wording would not be of any use, since it is a non-English machine.

Answer 1

I think it is just how it works:

The profile is applied only if the network at an adapter matches it: When you are connected with a public network, the public profile gets applied if the adapter is allowed in the public profile. If it is not allowed, no profile gets applied, thus, the firewall is off for that network. So the warning is absolutely true.