Check: WN12-CC-000008
Microsoft Windows Server 2012/2012 R2 Member Server STIG:
WN12-CC-000008
(in versions v3 r2 through v2 r7)
Title
The IP-HTTPS IPv6 transition technology must be disabled. (Cat II impact)
Discussion
IPv6 transition technologies, which tunnel packets through other protocols, do not provide visibility.
Check Content
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface\ Value Name: IPHTTPS_ClientState Type: REG_DWORD Value: 3
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> TCPIP Settings -> IPv6 Transition Technologies -> "Set IP-HTTPS State" to "Enabled: Disabled State". Note: "IPHTTPS URL:" must be entered in the policy even if set to Disabled State. Enter "about:blank".
Additional Identifiers
Rule ID: SV-225321r569185_rule
Vulnerability ID: V-225321
Group Title: SRG-OS-000095-GPOS-00049
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |