Configure the "Windows Firewall: Public: Apply local firewall rules" to organizational standards.

Back

CONTROL ID
07850

CONTROL TYPE
Configuration

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure network protection settings to organizational standards., CC ID: 07601

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (80FEB8DF-D6D2-4BB2-9900-05AB7470ACA8, Win7SP1 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (6E0D31D4-28ED-40AC-8F5B-6CE49DEDD0F5, Win8 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (A7DE1027-B2CE-4A13-B815-0003C1B70774, WinVistaSP2 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (597F6AA7-FD9E-494D-8B93-BA37370DC81E, WS2008R2SP1 Domain Controller Security Compliance, 1.1)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (A46DCD33-C3E4-485B-94A0-C3848F88099D, WS2008R2SP1 Member Server Security Compliance, 1.1)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Not Defined". (72C0CC42-01E3-4DB0-80AC-5A725D5A55A0, WS2008SP2 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (F16BEE45-C8F0-48DB-A887-C17F55ADD65E, WS2008SP2 Member Server Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (62D9050F-0AC2-4DCD-BBF1-B7A8D1ABEE83, WS2012 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local firewall rules" setting to "Yes (default)". (C617A0E7-A8D4-4C1F-956E-C4264F4AD9EB, WS2012 Member Server Security Compliance, 1.0)
(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (9.3.5, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 1)
(L1) Ensure 'Windows Firewall: Public: Settings: Apply local firewall rules' is set to 'No' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (9.3.5, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 2)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.5_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.5.2_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.5_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.5.1_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.5_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.5.2_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.5_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.5.1_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.2_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.2.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.2_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.2.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.2_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.2.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.2_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.2.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Configure 'Windows Firewall: Public: Apply local firewall rules' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administrative privil… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.10_Configure_Windows_Firewall_Public_Apply_local_firewall_rules Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.10.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Configure 'Windows Firewall: Public: Apply local firewall rules' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administrative privil… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.10_Configure_Windows_Firewall_Public_Apply_local_firewall_rules Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.10.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.11_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.11.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.11_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.11.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.3_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.3.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.3_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.3.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.3_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.3.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. Rationale: Users with administ… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.3_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.3.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local firewall rules' to 'Yes (default)' Description: This setting controls whether local administrators are allowed to create local firewall rules that apply together with firewall rules configured by Group Policy. The recommended state for this se… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.4_Set_Windows_Firewall_Public_Apply_local_firewall_rules_to_Yes_default Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.4.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
The 'Windows Firewall: Public: Apply local firewall rules' setting should be configured correctly. Technical Mechanisms: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Pub… (CCE-10188-1, Common Configuration Enumeration List, Combined XML: Microsoft Windows Server 2008 R2, 5.20130214)