Configure the "Windows Firewall: Domain: Apply local firewall rules" to organizational standards.

Back

CONTROL ID
07833

CONTROL TYPE
Configuration

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure network protection settings to organizational standards., CC ID: 07601

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (31FC7CB9-90A1-4095-A254-14A8DD75EE26, Win7SP1 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (98C7F141-384E-4FFF-8289-1F7DB1FE50CD, Win8 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (760199B0-15B2-4265-AADC-10CBFE3816A7, WinVistaSP2 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (DDA8E432-9D3A-4A6D-B385-AD6ED4E6F038, WS2008R2SP1 Domain Controller Security Compliance, 1.1)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (BC41AD1F-CD82-4CE6-9C20-D012BD267DBD, WS2008R2SP1 Member Server Security Compliance, 1.1)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Not Defined". (6AD377FB-3A6C-42F0-8126-E0865B23E461, WS2008SP2 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (23A381AB-3DD3-49BB-BABF-928D6FF3BAEE, WS2008SP2 Member Server Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (4BE354B4-4CFD-4CF7-9455-3A718DDA99A4, WS2012 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Domain: Apply local firewall rules" setting to "Yes (default)". (D8525AA3-86D2-4047-817E-60443FD1441D, WS2012 Member Server Security Compliance, 1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.2_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.2.2_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.2_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.2.1_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.2_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.2.1_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.3.2_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.3.2.2_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Configure 'Windows Firewall: Domain: Apply local firewall rules' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administrative privil… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.2_Configure_Windows_Firewall_Domain_Apply_local_firewall_rules Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.2.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Configure 'Windows Firewall: Domain: Apply local firewall rules' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administrative privil… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.2_Configure_Windows_Firewall_Domain_Apply_local_firewall_rules Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.2.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.3_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.3.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.2.3_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.2.3.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.5_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.5.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.5_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.5.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.5_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.5.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.1.5_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.1.5.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.4.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.4.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.4.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Domain: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.4_Set_Windows_Firewall_Domain_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.4.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
The 'Windows Firewall: Domain: Apply local firewall rules' setting should be configured correctly. Technical Mechanisms: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Dom… (CCE-10798-7, Common Configuration Enumeration List, Combined XML: Microsoft Windows Server 2008 R2, 5.20130214)