Security controls (Firewall)

We provide a comprehensive list of vulnerabilities and remediation options on this page for our visitors’ reference. However, we would like to inform you that EireaNet, Inc. offers a free of charge automated mitigation service to our monthly subscribers. This service is designed to detect and remediate any vulnerabilities or other security issues on your system. Our mitigation service is constantly updated with the latest threats and vulnerabilities, ensuring that our subscribers are always protected against the latest security threats.

In addition to the automated mitigation service, EireaNet, Inc. also provides personalized consulting for businesses that require a more tailored approach to their security needs. Our team of experts can conduct thorough security assessments and provide customized recommendations to address specific vulnerabilities within your system. This personalized consulting service aims to empower businesses with the knowledge and tools to enhance their overall security posture and mitigate potential risks effectively.

We understand the critical importance of staying ahead of evolving security threats, which is why we remain dedicated to continuously updating our mitigation service and staying informed about emerging vulnerabilities. By offering both automated and personalized solutions, we aim to cater to the diverse security needs of our subscribers, ultimately contributing to a more secure digital environment for all.

Disable merging of local Microsoft Defender Firewall connection rules with group policy firewall rules for the Public profile

Description

Controls whether local administrators are allowed to create connection security rules that apply together with connection security rules configured by Group Policy.

Potential risk

Users with administrative privileges might create firewall rules that expose the system to remote attack. Local connection rules should not be merged with Group Policy settings on a public network to prevent Group Policy settings from being changed and weakened.

Remediation options

Option 1 – Set the following Group Policy:
Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Public Profile\Settings Customize\Apply local connection security rules
To the following value: No

Option 2 – Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\PublicProfile\AllowLocalIPsecPolicyMerge
To the following REG_DWORD value: 0

Disable Microsoft Defender Firewall notifications when programs are blocked for Private profile

Description

Determines whether Microsoft Defender Firewall with Advanced Security display notifications to the user when a program is blocked from receiving inbound connections

Potential risk

Firewall notifications can be complex and may confuse the end users, who would not be able to address the alert.

Remediation options

Option 1 – Set the following Group Policy:
Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Private Profile\Settings Customize\Display a notification
To the following value: No

Option 2 – Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\PrivateProfile\DisableNotifications
To the following REG_DWORD value: 1

Disable Microsoft Defender Firewall notifications when programs are blocked for Domain profile

Description

Determines whether Microsoft Defender Firewall with Advanced Security display notifications to the user when a program is blocked from receiving inbound connections

Potential risk

Firewall notifications can be complex and may confuse the end users, who would not be able to address the alert.

Remediation options

Option 1 – Set the following Group Policy:
Computer Configuration\Policies\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Domain Profile\Settings Customize\Display a notification
To the following value: No

Option 2 – Set the following registry value:
HKLM\SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile\DisableNotifications
To the following REG_DWORD value: 1