Control 9.1.1/9.2.1/9.3.1

ansible-lockdown / Windows-2019-CIS

CIS Baseline Ansible Role for Windows 2019

MIT License

134 stars 72 forks source link

Closed Julieeeen closed 1 year ago

Julieeeen commented 3 years ago

Hi,

To enable the firewall you are using the :

win_firewall: state: enabled profile: Private

But CIS tool is checking for the registry key,

To alvoid false positive should you not use :

   path: HKLM:\Software\Policies\Microsoft\Windowsfirewall\Domainprofile
    name: "EnableFirewall"
    data: "1"
    type: dword