When the OES server is installed with firewall disabled, it is set to the default zone. Thus, the public network interface is not added to the firewall active zone.
Before configuring CIS, you must first change the zone from default to public.
Open Yast2 Firewall window using yast2 firewall command.
Select the required ethernet device and then click Change Zone > public.