Title

The Windows Firewall must display notifications when a program is blocked from receiving an inbound connection for the Private Profile. (Cat III impact)

Discussion

A firewall provides a line of defense against attack. To be effective, it must be enabled and properly configured. The display of notifications to the user when a program is blocked from receiving an inbound connection on a private network must be enabled to alert the user of potential issues.

Check Content

Fix Text

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Windows Firewall with Advanced Security -> Windows Firewall with Advanced Security -> Windows Firewall Properties (this link will be in the right pane) -> Private Profile Tab -> Settings (select Customize) -> Firewall settings, "Display a notification" to "Yes (default)". Configure a comparable setting if a third-party firewall is used.

Additional Identifiers

Rule ID: SV-25232r2_rule

Vulnerability ID: V-17430

Group Title: Windows Firewall Private - Display Notifications

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.