Detections
Analytics

4.11.54.2.3 Ensure 'Allow unencrypted traffic' is set to 'Disabled'

Information

This policy setting allows you to manage whether the Windows Remote Management (WinRM) service sends and receives unencrypted messages over the network.

The recommended state for this setting is: Disabled.

Encrypting WinRM network traffic reduces the risk of an attacker viewing or modifying WinRM messages as they transit the network.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled.

Administrative Templates\Windows Components\Windows Remote Management (WinRM)\WinRM Service\Allow unencrypted traffic

Impact:

None - this is the default behavior.

See Also

https://workbench.cisecurity.org/benchmarks/27282

Item Details

Category: ACCESS CONTROL, IDENTIFICATION AND AUTHENTICATION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|AC-17(2), 800-53|IA-5, 800-53|IA-5(1), 800-53|SC-8, 800-53|SC-8(1), CSCv7|14.4

Plugin: Windows

Control ID: 6201b8afe379b456936ca6d9280f2619b2e9c1653cbdc747b754c673420ebd1a