Windows Firewall: Public: Logged Successful ConnectionsID: oval:gov.nist.USGCB.win7firewall:def:20927 | Date: (C)2012-04-13 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
Use this option to log when Windows Firewall with Advanced Security allows an inbound connection. The log records why
and when the connection was formed. Look for entries with the word ALLOW in the action column of the log.
Default: No
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Public Profile Tab\Logging\Logged successful connections
(2) REG: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\Logging!LogSuccessfulConnections
Platform: |
Microsoft Windows 7 |