Cant disable firewall profiles

[josefprado]

Hi,

When we do manage Windows Firewall, its not a good idea to stop the firewall service, as well described here:

https://technet.microsoft.com/pt-br/library/cc766337%28v=ws.10%29.aspx?f=255&MSPPError=-2147217396

Is it possible to use your Module to disable the profiles (as described in the documentation above) while keeping the service running, instead of stoppping the service?

Regards,

Josef Prado

[Jnchi]

Conversely, how can one ensure those profiles are enabled?

[Jnchi]

For posterity,

Append the following snippet to the rules_list.txt,

Computer
Software\Policies\Microsoft\WindowsFirewall\DomainProfile
EnableFirewall
DWORD:1

Computer
Software\Policies\Microsoft\WindowsFirewall\PrivateProfile
EnableFirewall
DWORD:1

Computer
Software\Policies\Microsoft\WindowsFirewall\PublicProfile
EnableFirewall
DWORD:1

Note: This solution requires noma4i/puppet-windows_cis.