9.2.1 Ensure 'Windows Firewall: Private: Firewall state' is set to 'On (recommended)'

Information

Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile.

The recommended state for this setting is: On (recommended).

Rationale:

If the firewall is turned off all traffic will be able to access the system and an attacker may be more easily able to remotely exploit a weakness in a network service.

Impact:

None - this is the default behavior.

Solution

To establish the recommended configuration via GP, set the following UI path to On (recommended):

Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Private Profile\Firewall state

Default Value:

On (recommended). (The Windows Firewall with Advanced Security will be active in this profile.)

See Also

https://workbench.cisecurity.org/files/4286

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Windows

Control ID: 1ffdbcac65c71c85477ad319229fb6d134c60ad3c19f43ee72e70cbde1bcafce