Detections
Analytics

1.2.1.1.1.1.11 Configure 'Windows Firewall: Prohibit notifications'

Information

Windows Firewall can display notifications to users when a program requests that Windows Firewall add the program to the program exceptions list. This situation occurs when programs attempt to open a port and are not allowed to do so because of current Windows Firewall rules. The Windows Firewall: Prohibit notifications setting determines whether these settings are shown to the users. If you configure this policy setting to Enabled, Windows Firewall prevents the display of these notifications. If you configure it to Disabled, Windows Firewall allows the display of these notifications. Some organizations may prefer to avoid alarming users when firewall rules block certain types of network activity.

Solution

Configure the following Group Policy setting in a manner that is consistent with the security and operational requirements of your organization-

Computer Configuration\Administrative Templates\Network\Network Connections\Windows Firewall\Standard Profile\Windows Firewall- Prohibit notifications

Impact- If you configure this policy setting to Enabled, Windows Firewall prevents the display of these notifications. If you configure it to Disabled, Windows Firewall allows the display of these notifications.

See Also

https://workbench.cisecurity.org/files/42

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-4(5), CCE|CCE-17483-9

Plugin: Windows

Control ID: d3b92477812767b58f9c2a07b4e23893e1b5da5d7c054293b307e1974925aae6