Microsoft Windows Server 2022 Security Technical Implementation Guide

The Microsoft Windows Server 2022 Security Technical Implementation Guide (V2 R11) has 277 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

277STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R11

CurrentPublished Wed Sep 30 2026

Windows Server 2022 must have a host-based firewall installed and enabled.

Microsoft Windows Server 2022 Security Technical Implementation Guide

Assessment Title

Rule Text

Windows Server 2022 must have a host-based firewall installed and enabled.

Description

Discussion Text

A firewall provides a line of defense against attack, allowing or blocking inbound and outbound connections based on a set of rules.

Satisfies: SRG-OS-000480-GPOS-00227, SRG-OS-000480-GPOS-00232

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-254265

Rule

SV-254265r991589_rule

Severity

medium

Rule Version

WN22-00-000280

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Determine if a host-based firewall is installed and enabled on the system.

If a host-based firewall is not installed and enabled on the system, this is a finding.

The configuration requirements will be determined by the applicable firewall STIG.

Implementation Procedure

Fix Text

Install and enable a host-based firewall on the system.

STIG check 28 of 277 in the Microsoft Windows Server 2022 STIG checklist

← Previous · V-254264Windows Server 2022 must have the roles and features required by the system documented.Next · V-254267 →Windows Server 2022 must automatically remove or disable temporary user accounts after 72 hours.