Detections
Analytics

4.6.18.1 (L1) Ensure 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is set to 'Enabled: 3 = Prevent Wi-Fi when on Ethernet'

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting prevents computers from establishing multiple simultaneous connections to either the Internet or to a Windows domain.

The recommended state for this setting is: Enabled: 3 = Prevent Wi-Fi when on Ethernet

Preventing bridged network connections can help prevent a user unknowingly allowing traffic to route between internal and external networks, which risks exposure to sensitive internal data.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled: 3 = Prevent Wi-Fi when on Ethernet

Administrative Templates\Network\Windows Connection Manager\Minimize the number of simultaneous connections to the Internet or a Windows Domain

Impact:

While connected to an Ethernet connection, Windows won't allow use of a WLAN (automatically

or

manually) until Ethernet is disconnected. However, if a cellular data connection is available, it will always stay connected for services that require it, but no Internet traffic will be routed over cellular if an Ethernet or WLAN connection is present.

See Also

https://workbench.cisecurity.org/benchmarks/21719

Item Details

References: CSCv7|15.5

Plugin: Windows

Control ID: df876d3f3d57da2c48107fdc168e6fd52cd88b53d25706a2d0da83b56225c2b2