Citadel / Controls / Firewall

Firewall Control

What does this control check?

The Firewall control verifies that your computer's built-in firewall is enabled and actively protecting your device. A firewall monitors all network traffic and blocks unauthorized connections from reaching your computer.

Important: Without a firewall, your computer is exposed to the internet and any network you connect to. Attackers on the same WiFi network (at a coffee shop, airport, or hotel) can scan for and exploit vulnerabilities in your system. A firewall acts as a barrier, blocking these malicious connection attempts before they can reach your device.

Why is this important?

🚧

Network Protection

Firewalls block unauthorized incoming connections from the internet and local networks, preventing attackers from accessing services running on your computer.

🦠

Malware Defense

Many types of malware try to communicate with external servers to download additional payloads or send stolen data. Firewalls can block these unauthorized connections.

📡

Public WiFi Safety

When connected to public or untrusted networks, a firewall is your first line of defense against other users on the same network attempting to attack your device.

How to fix this

Enabling Windows Firewall

  1. Click the Start button and select Settings
  2. Click Privacy & security (or Update & Security on older versions)
  3. Click Windows Security
  4. Click Firewall & network protection
  5. You'll see three network types: Domain, Private, and Public
  6. Click on each network type and ensure the firewall is On
  7. If any firewall is off, toggle the switch to turn it on
Quick access: You can also search for "Windows Defender Firewall" in the Start menu to access firewall settings directly.
⚠️ Important notes:
  • All three network types (Domain, Private, Public) should have the firewall enabled
  • If you use third-party security software, it may manage the firewall - check with IT support
  • Do not disable the firewall to fix network issues - contact IT support instead
  • The firewall should be on even when connected to your home network

Enabling Firewall on macOS

  1. Click the Apple menu in the top-left corner
  2. Select System Settings (or System Preferences on older versions)
  3. Click Network
  4. Click Firewall in the left sidebar (or scroll down to find it)
  5. If the firewall is off, you may need to click the lock icon and enter your password
  6. Toggle the firewall switch to On
  7. The status should now show "Firewall is turned on"
Note: On older macOS versions, firewall settings are in System Preferences → Security & Privacy → Firewall tab.
⚠️ Important notes:
  • The macOS firewall is disabled by default - you must manually enable it
  • Enabling the firewall will not block most normal applications from working
  • If an app needs to accept incoming connections, macOS will ask for your permission
  • The firewall should remain on even when connected to trusted networks

Verifying the fix

After enabling the firewall, Citadel will automatically verify this control during its next check.

To check firewall status manually:

  1. Open Settings → Privacy & security → Windows Security
  2. Click Firewall & network protection
  3. All three network types should show a green checkmark and "Firewall is on"
  4. If you see a red X or "Firewall is off", click that network and turn it on

To check firewall status manually:

  1. Open System Settings → Network → Firewall
  2. The status should show "Firewall is turned on"
  3. The toggle switch should be in the On position

Alternative: On older macOS versions, check System Preferences → Security & Privacy → Firewall tab.