Azure Policy Guest Configuration - Find a VM with deactivated Windows Firewall

Question

I would like to write a Policy to find VMs with deactivated Windows Firewall.

At Azure Policy Templates i only have found a Policy with detailed Rules for the Windows Firewall.

Many thanks.

Best Regards, Phil

Answer 1

I don't know the answer for Guest Policies. But have you considered using Azure DSC to enforce it? You can also monitor the compliance then within the automation account.

https://learn.microsoft.com/en-us/azure/virtual-machines/extensions/dsc-overview

E.g. using this module https://github.com/dsccommunity/NetworkingDsc/blob/main/source/Examples/Resources/FirewallProfile/1-FirewallProfile_ConfigurePrivateFirewallProfile_Config.ps1