Title

Network – Mapper I/O Driver (Cat II impact)

Discussion

This check verifies that the Mapper I/O network protocol driver is disabled.

Check Content

If the following registry values don’t exist or are not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Subkey: \Software\Policies\Microsoft\Windows\LLTD\ Value Name: AllowLLTDIOOndomain Value Name: AllowLLTDIOOnPublicNet Value Name: EnableLLTDIO Value Name: ProhibitLLTDIOOnPrivateNet Type: REG_DWORD Value: 0

Fix Text

Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> Link-Layer Topology Discovery “Turn on Mapper I/O (LLTDIO) driver” to “Disabled”.

Additional Identifiers

Rule ID: SV-16635r1_rule

Vulnerability ID: V-15696

Group Title: Network – Mapper I/O Driver

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.