BaselineWatch
Desk

WN25-00-000280 Windows Server 2025 must have a host-based firewall installed and enabled.

DISA STIG library V1R4
All changes in this version
first version loaded CAT II

Maps to SC-7(12) via CCI-002406

Title

Windows Server 2025 must have a host-based firewall installed and enabled.

Control

Determine if a host-based firewall is installed and enabled on the system. If a host-based firewall is not installed and enabled on the system, this is a finding. The configuration requirements will be determined by the applicable firewall STIG.

Discussion

A firewall provides a line of defense against attack, allowing or blocking inbound and outbound connections based on a set of rules. Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000480-GPOS-00232

Related controls

CCI-002406

Fix

Install and enable a host-based firewall on the system.