Revision 1.2Jun 9, 2021

Miscellaneous
  • Metadata updated.
  • Platform check updated.
  • References updated.
Added
  • 18.4.5 Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes (recommended)'
  • 18.4.7 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' is set to 'Disabled'
  • 18.9.16.2 Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set to 'Enabled: Disable Authenticated Proxy usage'
  • 18.9.39.1 Ensure 'Turn off location' is set to 'Enabled'
  • CIS_DC_SERVER_2016_Level_2_v1.2.0.audit from CIS Microsoft Windows Server 2016 DC L2 v1.2.0
Removed
  • 18.4.5 Ensure 'MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds' is set to 'Enabled: 300,000 or 5 minutes'
  • 18.4.7 Ensure 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses' is set to 'Disabled'
  • 18.9.16.2 Ensure 'Configure Authenticated Proxy usage for the Connected User Experience and Telemetry service' is set
  • 18.9.39.2 Ensure 'Turn off location' is set to 'Enabled'
  • CIS Microsoft Windows Server 2016 DC L2 v1.2.0