The Public Profile is the default profile for a computer connected to a public network but not connected to a domain controller. This should be the most restricted profile.
Default: Yes
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Windows Firewall with Advanced Security\Windows Firewall with Advanced Security\Windows Firewall Properties\Public Profile\Windows Firewall ...