Detections
Analytics

18.4.21.1 (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled'

Information

This policy setting prevents computers from connecting to both a domain based network and a non-domain based network at the same time.

The recommended state for this setting is: Enabled.

Rationale:

Blocking simultaneous connections can help prevent a user unknowingly allowing network traffic to flow between the Internet and the corporate network.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled:

Computer Configuration\Policies\Administrative Templates\Network\Windows Connection Manager\Minimize the number of simultaneous connections to the Internet or a Windows Domain

Impact:

None - this is the default configuration.


Default Value:

Enabled. (When the computer has at least one active connection to the Internet, new automatic connection attempts to the Internet are blocked. When the computer has at least one active connection to a Windows domain, new automatic connection attempts to the same Windows domain are also blocked. Manual connection attempts by users to either the Internet or a Windows domain are not blocked.)

See Also

https://workbench.cisecurity.org/files/1721

Item Details

References: CSCv6|12

Plugin: Windows

Control ID: 5acee0a0e78a3357d211f0b574cc1c5b1c97fd1902a23792aba461408f0ef818