Creating a Firewall Compliance Rule

This compliance rule will verify if the target device has a firewall installed that is active. A compliance rule defines the criteria to which the target population has to correspond to be considered compliant. These criteria are collected in groups, the criteria groups, which can contain any number of criteria. This rule will only have one criteria group containing only one criterion.

1. Click Create Compliance Rule .
2. Enter Firewall into the Name box and then click OK .
   The new compliance rule is added to the list of members in the right pane.
3. Double-click the new rule.
4. To add the compliance criteria select the Criteria tab to the right.
5. Select Add Criteria Group .
   The Criteria Group window provides access to the list of available criteria in the Criteria Group Definition box. The first line of this box indicates the index number of the criteria group which is about to be defined, that is, Criteria Group 1 in our case, because we are only creating the first for this rule.
6. Enter Firewall into the Name box.
7. From the Class list select the Security Settings Inventory option.
8. Select the table from which the criteria is to be chosen from the Table box, that is, in our case this is the value Security Center Firewalls .
   The following Available Criteria box now displays all criteria available for the selected class and table.
9. Select the criterion Enabled .
10. Click Find next to the Value box.
11. In the Search Criteria window change the operator to Contains in the Operator box.
12. Click Find next to the Value box again.
13. In the Results box select Yes and click OK to close the window.
14. Click Add to add the defined criterion.
15. Click OK again to add the criteria group to the compliance rule.
16. To activate the compliance rule, select the green colored option active instead of the currently displayed red option inactive in the Status list.

You have now created a compliance rule that will check if its assigned devices/device groups have a enabled firewall.