Detections
Analytics

1.105 APPL-26-002170

Information

The macOS system must disable iCloud Private Relay.

GROUP ID: V-277132
RULE ID: SV-277132r1148848

Enterprise networks may be required to audit all network traffic by policy; therefore, iCloud Private Relay must be disabled.

Network administrators can also prevent the use of this feature by blocking DNS resolution of mask.icloud.com and mask-h2.icloud.com.

Solution

Configure the macOS system to disable the iCloud Private Relay by installing the "com.apple.applicationaccess" configuration profile.

See Also

https://workbench.cisecurity.org/benchmarks/26538

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7, 800-53|CM-7a., CCI|CCI-000381, Rule-ID|SV-277132r1148848_rule, STIG-ID|APPL-26-002170, Vuln-ID|V-277132

Plugin: Unix

Control ID: e065135ea07578e4095af8cb8510c4b83ebdc70285429975053847168d5e37da