Detections
Analytics
5.28 (L1) Ensure 'Simple TCP/IP Services (simptcp)' is set to 'Disabled' or 'Not Installed'
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Supports the following TCP/IP services: Character Generator, Daytime, Discard, Echo, and Quote of the Day.The recommended state for this setting is: Disabled or Not Installed.
Note: This service is not installed by default. It is supplied with Windows, but is installed by enabling an optional Windows feature (Simple TCPIP services (i.e. echo, daytime etc)).
Rationale:
The Simple TCP/IP Services have very little purpose in a modern enterprise environment - allowing them might increase exposure and risk for attack.
Solution
To establish the recommended configuration via GP, set the following UI path to: Disabled or ensure the service is not installed.Computer Configuration\Policies\Windows Settings\Security Settings\System Services\Simple TCP/IP Services
Impact:
The Simple TCP/IP services (Character Generator, Daytime, Discard, Echo and Quote of the Day) will not be available.
Default Value:
Not Installed (Automatic when installed)
CIS Controls:
Version 6
9.1 Limit Open Ports, Protocols, and Services
Ensure that only ports, protocols, and services with validated business needs are running on each system.
Version 7
9.2 Ensure Only Approved Ports, Protocols and Services Are Running
Ensure that only network ports, protocols, and services listening on a system with validated business needs, are running on each system.
See Also
Item Details
References: CSCv6|9.1, CSCv7|9.2
Plugin: Windows
Control ID: 7e0820bcd54de4798b58d481dcf17e2610eb03552acec54ed7ff16dea0db197c