Configure the "Windows Firewall: Domain: Firewall state" to organizational standards.

Back

CONTROL ID
07667

CONTROL TYPE
Configuration

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure network protection settings to organizational standards., CC ID: 07601

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (EE2775B4-C93E-4C5F-9FC2-BFBEFF323FE9, Win7SP1 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (546CFB76-C1F3-410D-B6E1-22414F9B5646, Win8 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (01F915D9-4CB4-4C58-86E7-AA2EE29208A1, WinVistaSP2 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (FBCA7ED4-F028-4D86-B455-2146C5247904, WS2008R2SP1 Domain Controller Security Compliance, 1.1)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (D174BE42-6884-4D57-A6ED-5722805C2033, WS2008R2SP1 Member Server Security Compliance, 1.1)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (BC790FF8-1042-4067-8863-EF72B098509F, WS2008SP2 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (4810CBE1-4607-46EF-BE2D-0AECA90CE126, WS2008SP2 Member Server Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (2888E743-ACF4-4388-A205-89957D81387B, WS2012 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Firewall state" setting to "On (recommended)". (24BFB853-F395-4216-A322-69413B06D16D, WS2012 Member Server Security Compliance, 1.0)
(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not us… (9.1.1, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 1)
(L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not us… (9.1.1, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 2)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.3_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.3.2_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.3_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.3.1_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.3_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.3.2_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.3_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.3.1_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.11_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.11.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.11_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.11.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.11_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.11.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.11_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.11.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.7.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.7.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.7.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.7.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.7.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.7.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.7.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.7_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.7.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.6_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.6.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.6_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.6.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.6_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.6.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Firewall state' to 'On (recommended)' Description: Select On (recommended) to have Windows Firewall with Advanced Security use the settings for this profile to filter network traffic. If you select Off, Windows Firewall with Advanced Security will not use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.6_Set_Windows_Firewall_Domain_Firewall_state_to_On_recommended Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.6.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
The Windows Firewall should be enabled or disabled as appropriate for the Domain Profile. Technical Mechanisms: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Domain Profi… (CCE-10482-8, Common Configuration Enumeration List, Combined XML: Microsoft Windows Server 2008 R2, 5.20130214)