Check: WN08-CC-000010
Windows 8/8.1 STIG:
WN08-CC-000010
(in versions v1 r23 through v1 r16)
Title
The Teredo IPv6 transition technology must be disabled. (Cat II impact)
Discussion
IPv6 transition technologies, which tunnel packets through other protocols, do not provide visibility.
Check Content
If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\TCPIP\v6Transition\ Value Name: Teredo_State Type: REG_SZ Value: Disabled
Fix Text
Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> TCPIP Settings -> IPv6 Transition Technologies -> "Set Teredo State" to "Enabled: Disabled State".
Additional Identifiers
Rule ID: SV-48349r3_rule
Vulnerability ID: V-26578
Group Title: Teredo State
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000382 |
Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services. |
Controls
Number | Title |
---|---|
CM-7 |
Least Functionality |