Detections
Analytics

9.2.1 Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'

Information

This policy setting controls whether the built-in Private Firewall state is enabled or disabled.

The recommended state for this setting is: On (recommended).

If the firewall is turned off all traffic will be able to access the system, and a threat actor may be more easily able to remotely exploit a weakness in a network service.

Solution

To establish the recommended configuration via GP, set the following UI path to On (recommended) :

Computer Configuration\Policies\Windows Settings\Security Settings\Windows Defender Firewall with Advanced Security\Windows Defender Firewall with Advanced Security\Windows Defender Firewall Properties\Private Profile\Firewall state

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/27453

Item Details

Category: SECURITY ASSESSMENT AND AUTHORIZATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CA-9, 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Windows

Control ID: 98b256850c5caa2c003445812ca4d2562e62d4e5ad271535f3e9c6f75de4c1be