That's great information.  Thanks, Max...



On 2/21/07 11:57 AM, "Caines, Max" <[log in to unmask]> wrote:



> Hi Dave

> 

> As ar as I know, there is no built-in check. However, there are a couple

> of registry keys you can test:

> 

> HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallP

> olicy\StandardProfile\[EnableFirewall]

> HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallP

> olicy\DomainProfile\[EnableFirewall]

> 

> In each case a DWORD value of 1 means "on"

> 

> Regards

> 

> ----------------------------------------

> Max Caines

> IT Services, University of Wolverhampton

> Wolverhampton, West Midlands WV1 1SB

> Tel: 01902 322245 Fax: 01902 322699

>  

>> -----Original Message-----

>> From: Cisco Clean Access Users and Administrators

>> [mailto:[log in to unmask]] On Behalf Of David Stempien

>> Sent: 21 February 2007 15:58

>> To: [log in to unmask]

>> Subject: [CLEANACCESS] Windows Firewall clean access check

>> 

>> In the midst of building a role requirement, I cannot, for

>> the life of me,

>> find a check of "Windows Firewall is Enabled" or similar.  Is

>> this one of

>> the Cisco-supplied checks?

>> 

>> I'm sure I'm blind and am just missing it...  Can anyone help

>> me see the

>> way?

>> 

>> Thanks!

>> 

>> --

>> Dave Stempien, Network Security Engineer

>> University of Rochester Medical Center

>> Information Systems Division

>> 585-784-2427

>> 

>>