Check: 3.097
Windows 2003 DC STIG:
3.097
(in version v6 r40)
Title
The system is configured for a greater keep-alive time than recommended. (Cat III impact)
Discussion
Controls how often TCP sends a keep-alive packet in attempting to verify that an idle connection is still intact.
Check Content
Fix Text
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds” to “300000 or 5 minutes (recommended)” or less.
Additional Identifiers
Rule ID: SV-29608r1_rule
Vulnerability ID: V-4113
Group Title:
Expert Comments
Expert comments are only available to logged-in users.
CCIs
CCIs tied to check.
| Number | Definition |
|---|---|
| CCI-002385 |
Protect against or limit the effects of organization-defined types of denial-of-service events. |
Controls
Controls tied to check. These are derived from the CCIs shown above.
| Number | Title |
|---|---|
| SC-5 |
Denial of Service Protection |