Windows Defender Firewall with Advanced Security local connection rules must not be merged with Group Policy settings when connected to a public network.
An XCCDF Rule
Description
A firewall provides a line of defense against attack. To be effective, it must be enabled and properly configured. Local connection rules will not be merged with Group Policy settings on a public network to prevent Group Policy settings from being changed.
- ID
- SV-242005r922960_rule
- Version
- WNFWA-000025
- Severity
- Medium
- References
- Updated
Remediation Templates
A Manual Procedure
If the system is not a member of a domain, this is NA.
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Windows Defender Firewall with Advanced Security >> Windows Defender Firewall with Advanced Security >> Windows Defender Firewall Properties (this link will be in the right pane) >> Public Profile tab >> Settings (select Customize) >> Rule merging, "Apply local connection security rules:" to "No".