35.11 (L1) Ensure 'Enable Public Network Firewall: Disable Inbound Notifications' is set to 'True'

Information

Select this option to have Windows Firewall with Advanced Security display notifications to the user when a program is blocked from receiving inbound connections.

The recommended state for this setting is: True

Some organizations may prefer to avoid alarming users when firewall rules block certain types of network activity. However, notifications can be helpful when troubleshooting network issues involving the firewall.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to 'True':

Firewall\Enable Public Network Firewall: Disable Inbound Notifications

Impact:

Windows Firewall will not display a notification when a program is blocked from receiving inbound connections.

See Also

https://workbench.cisecurity.org/benchmarks/16852

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4, CSCv7|11.2

Plugin: Windows

Control ID: 3fef9efc4a67173ec8391564e495bce30528ec12c1aa34ddf4399d77fd2fcb74