Detections
Analytics

4.6.9.1 (L1) Ensure 'Prohibit installation and configuration of Network Bridge on your DNS domain network' is set to 'Enabled'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

You can use this procedure to control a user's ability to install and configure a Network Bridge.

The recommended state for this setting is: Enabled

The Network Bridge setting, if enabled, allows users to create a Layer 2 Media Access Control (MAC) bridge, enabling them to connect two or more physical network segments together. A Network Bridge thus allows a computer that has connections to two different networks to share data between those networks.

In an enterprise managed environment, where there is a need to control network traffic to only authorized paths, allowing users to create a Network Bridge increases the risk and attack surface from the bridged network.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled

Administrative Templates\Network\Network Connections\Prohibit installation and configuration of Network Bridge on your DNS domain network

Impact:

Users cannot create or configure a Network Bridge.

See Also

https://workbench.cisecurity.org/benchmarks/21767

Item Details

References: CSCv7|11.3

Plugin: Windows

Control ID: d236cb1e0ad9a8905ac481f5423a5f7c1cd8a897249669315ab39eca3c195292