Windows (desktop and server)
TMA-WIN-FIREWALL
Ensure Windows Firewall is enabled for all profiles
HighLevel 1Automatedwindows
Description
The host firewall must be on for Domain, Private and Public profiles.
How it is checked
Audit method: Shell command
shell
(Get-NetFirewallProfile | Where-Object { -not $_.Enabled }).Count- Expected output
0
How it is fixed
Fix method: Shell command
shell
Set-NetFirewallProfile -Profile Domain,Private,Public -Enabled TrueProperties
- Operating systems
- Any
- Tags
- windowsfirewall
- Reference
- CIS Microsoft Windows Server Benchmark - Windows Defender Firewall with Advanced Security
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target windows