Title

The system must be configured to send error reports on TCP port 1232. (Cat II impact)

Discussion

An error reporting site's TCP port must be defined in the local system in order to forward data from local systems via TCP. Port 1232 is the recommended port setting.

Check Content

This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see V-57457). If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\ Value Name: CorporateWerPortNumber Type: REG_DWORD Value: 0x000004d0 (1232)

Fix Text

This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see V-57457). Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Error Reporting -> Advanced Error Reporting Settings -> "Configure Corporate Windows Error Reporting" to "Enabled" with "1232" defined as the "Server Port".

Additional Identifiers

Rule ID: SV-71881r1_rule

Vulnerability ID: V-57461

Group Title: WINER-000009

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.