Configure the "Windows Firewall: Public: Apply local connection security rules" to organizational standards.

Back

CONTROL ID
07890

CONTROL TYPE
Configuration

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure network protection settings to organizational standards., CC ID: 07601

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "No". (F8F37B46-5B7E-48D9-92A4-408F28C7B30E, Win7SP1 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "No". (85C05053-CD16-4315-9744-4CC5259EEBFF, Win8 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "No". (1F977FAB-FB09-4CD9-9C6A-FF75C6D0D5AE, WinVistaSP2 Computer Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "Yes". (24BEF348-9CBD-4A1D-A638-EF2634B32F21, WS2008R2SP1 Domain Controller Security Compliance, 1.1)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "Yes". (A3F12627-74B8-4FC2-BA0E-A897DA2E5A83, WS2008R2SP1 Member Server Security Compliance, 1.1)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "Not Defined". (0F85781F-CDB2-4D7B-ACCB-12270B2EE423, WS2008SP2 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "Yes". (C6B73792-5B89-4FD0-B5F8-ED1AA99011EA, WS2008SP2 Member Server Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "Yes". (36382CD1-1EBA-4F71-B02B-5B67530A30E8, WS2012 Domain Controller Security Compliance, 1.0)
Configure the "Windows Firewall: Public: Apply local connection security rules" setting to "Yes". (BAA43B53-078B-424F-9A4E-61ECB4840F24, WS2012 Member Server Security Compliance, 1.0)
(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The re… (9.3.6, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 1)
(L1) Ensure 'Windows Firewall: Public: Settings: Apply local connection security rules' is set to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The re… (9.3.6, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 2)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.1_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.1.2_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.1_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.1.1_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.1_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.1.2_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Use… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.3.1.1.2.1_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.3.1.1.2.1.1_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended s… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.3.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended s… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.3.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended s… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.3.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'No' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended s… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.3.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_No Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.3.3.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Configure 'Windows Firewall: Public: Apply local connection security rules' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Users… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.2_Configure_Windows_Firewall_Public_Apply_local_connection_security_rules Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.2.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Configure 'Windows Firewall: Public: Apply local connection security rules' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Users… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.2_Configure_Windows_Firewall_Public_Apply_local_connection_security_rules Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.2.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Us… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.3.1_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Us… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.3.2_, The Center for Internet Security Microsoft Windows Server 2008 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Us… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.2_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.2.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Us… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.2_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.2.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Us… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.2_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.2.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. Rationale: Us… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.4.1.1.3.2_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.4.1.1.3.2.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Member Server Benchmark, 2.1.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended … (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.3.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended … (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.3.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended … (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.3.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
Title: Set 'Windows Firewall: Public: Apply local connection security rules' to 'Yes' Description: This setting controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy. The recommended … (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.5.1.3_Set_Windows_Firewall_Public_Apply_local_connection_security_rules_to_Yes Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.5.1.3.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
The 'Windows Firewall: Public: Apply local connection security rules' setting should be configured correctly. Technical Mechanisms: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Pro… (CCE-10529-6, Common Configuration Enumeration List, Combined XML: Microsoft Windows Server 2008 R2, 5.20130214)