CIS Windows Server 2016 DC L2 v1.2.0

Warning! Audit Deprecated

This audit file has been deprecated and will be removed in a future update.

View Next Version

Audit Details

Name: CIS Windows Server 2016 DC L2 v1.2.0

Updated: 9/21/2021

Authority: CIS

Plugin: Windows

Revision: 1.5

Estimated Item Count: 69

Audit Changelog

 
Revision 1.5

Sep 21, 2021

Miscellaneous
  • Audit deprecated.
  • Metadata updated.
  • References updated.
Revision 1.4

Aug 16, 2021

Miscellaneous
  • Platform check updated.
Revision 1.3

Jun 17, 2021

Miscellaneous
  • Metadata updated.
  • References updated.
Revision 1.2

Jun 9, 2021

Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • References updated.
Added
  • 18.4.5 Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'
  • 18.4.7 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'
  • 18.9.16.2 Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'
  • 18.9.39.1 Ensure 'Turn off location' is set to 'Enabled'
  • CIS_DC_SERVER_2016_Level_2_v1.2.0.audit from CIS Microsoft Windows Server 2016 DC L2 v1.2.0
Removed
  • 18.4.5 Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes'
  • 18.4.7 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled'
  • 18.9.16.2 Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set
  • 18.9.39.2 Ensure 'Turn off location' is set to 'Enabled'
  • CIS Microsoft Windows Server 2016 DC L2 v1.2.0
Revision 1.1

Sep 29, 2020

Miscellaneous
  • References updated.