Detections
Analytics

1.120 (L1) Ensure 'Manage exposure of local IP addressess by WebRTC' is set to 'Disabled'

Information

This policy setting specifies a list of URLs or patterns which local IP address will be exposed by WebRTC.

The recommended state for this setting is: Disabled.

Note: If this policy is enabled, disabled, or not configured, and edge://flags/#enable-webrtc-hide-local-ips-with-mdns is Disabled, WebRTC will expose local IP addresses.

Enabling this setting and allowing exposure of IP addresses can allow an attacker to gather information about the internal network that could potentially be utilized to breach and traverse a network.

Solution

To establish the recommended configuration via GP, set the following UI path to Disabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Manage exposure of local IP addressess by WebRTC

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/24354

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 0868d12874f8d37e8679cc965fd39ec166fb9bd49d15472bc088c31abf6cae89