35.8 (L1) Ensure 'Enable Private Network Firewall' is set to 'True'

Information

Select True (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select False, Windows Firewall with Advanced Security will not use any of the firewall rules or connection security rules for this profile.

The recommended state for this setting is: True (recommended)

If the firewall is turned off all traffic will be able to access the system and an attacker may be more easily able to remotely exploit a weakness in a network service.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to True (recommended) :

Firewall\Enable Private Network Firewall

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/16853

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7, 800-53|SC-7(5), CSCv7|9.4

Plugin: Windows

Control ID: 940faf6a7af5ea37188a285ff41cfe3624e6909569b3bab5354923a6928848e2