|Platform: win2016||Date: (C)2017-08-03 (M)2017-10-16|
"Windows Firewall: Domain: Inbound connections"
This setting determines the behavior for inbound connections that do not match an inbound firewall rule. The default behavior is to block connections unless there are firewall rules to allow the connection.
If the firewall allows all traffic to access the system then an attacker may be more easily able to remotely exploit a weakness in a network service.
Configure this setting to block inbound connections by default.
None, this is the default configuration.
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Domain Profile
(2) REG: No Registry Info
|SCAP Repo OVAL Definition||oval:org.secpod.oval:def:40270|