diff --git a/policies/ad-domain-controller/Machine/Registry.pol.xml b/policies/ad-domain-controller/Machine/Registry.pol.xml
index e528987..ab264d8 100644
--- a/policies/ad-domain-controller/Machine/Registry.pol.xml
+++ b/policies/ad-domain-controller/Machine/Registry.pol.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<PolFile num_entries="9" signature="PReg" version="1">
+<PolFile num_entries="10" signature="PReg" version="1">
         <Entry type="4" type_name="REG_DWORD">
                 <Key>Software\BaseALT\Policies\Control</Key>
                 <ValueName>sshd-gssapi-auth</ValueName>
@@ -40,6 +40,11 @@
                 <ValueName>gpupdate.service</ValueName>
                 <Value>1</Value>
         </Entry>
+        <Entry type="4" type_name="REG_DWORD">
+                <Key>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile</Key>
+                <ValueName>EnableFirewall</ValueName>
+                <Value>1</Value>
+        </Entry>
         <Entry type="1" type_name="REG_SZ">
                 <Key>SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules</Key>
                 <ValueName>OpenSSH</ValueName>
diff --git a/policies/server/Machine/Registry.pol.xml b/policies/server/Machine/Registry.pol.xml
index aee1265..c9dd71e 100644
--- a/policies/server/Machine/Registry.pol.xml
+++ b/policies/server/Machine/Registry.pol.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<PolFile num_entries="8" signature="PReg" version="1">
+<PolFile num_entries="9" signature="PReg" version="1">
         <Entry type="4" type_name="REG_DWORD">
                 <Key>Software\BaseALT\Policies\Control</Key>
                 <ValueName>sshd-gssapi-auth</ValueName>
@@ -35,6 +35,11 @@
                 <ValueName>gpupdate.service</ValueName>
                 <Value>1</Value>
         </Entry>
+        <Entry type="4" type_name="REG_DWORD">
+                <Key>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile</Key>
+                <ValueName>EnableFirewall</ValueName>
+                <Value>1</Value>
+        </Entry><Paste>
         <Entry type="1" type_name="REG_SZ">
                 <Key>SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules</Key>
                 <ValueName>OpenSSH</ValueName>
diff --git a/policies/workstation/Machine/Registry.pol.xml b/policies/workstation/Machine/Registry.pol.xml
index aee1265..860c98f 100644
--- a/policies/workstation/Machine/Registry.pol.xml
+++ b/policies/workstation/Machine/Registry.pol.xml
@@ -1,5 +1,5 @@
 <?xml version="1.0" encoding="utf-8"?>
-<PolFile num_entries="8" signature="PReg" version="1">
+<PolFile num_entries="9" signature="PReg" version="1">
         <Entry type="4" type_name="REG_DWORD">
                 <Key>Software\BaseALT\Policies\Control</Key>
                 <ValueName>sshd-gssapi-auth</ValueName>
@@ -35,6 +35,11 @@
                 <ValueName>gpupdate.service</ValueName>
                 <Value>1</Value>
         </Entry>
+        <Entry type="4" type_name="REG_DWORD">
+                <Key>SOFTWARE\Policies\Microsoft\WindowsFirewall\DomainProfile</Key>
+                <ValueName>EnableFirewall</ValueName>
+                <Value>1</Value>
+        </Entry>
         <Entry type="1" type_name="REG_SZ">
                 <Key>SOFTWARE\Policies\Microsoft\WindowsFirewall\FirewallRules</Key>
                 <ValueName>OpenSSH</ValueName>