Detections
Analytics

1.67 O365-LY-000001

Information

The SIP security mode in Lync must be enabled.

GROUP ID: V-223344
RULE ID: SV-223344r1043178

When Lync connects to the server, it supports various authentication mechanisms. This policy allows the user to specify whether Digest and Basic authentication are supported. Disabled (default): NTLM/Kerberos/TLS-DSK/Digest/Basic Enabled: Authentication mechanisms: NTLM/Kerberos/TLS-DSK Gal Download: Requires HTTPS if user is not logged in as an internal user.

Solution

Set the policy value for

Computer Configuration >> Administrative Templates >> Skype for Business 2016 >> Microsoft Lync Feature Policies 'Configure SIP security mode'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-23, CAT|II, CCI|CCI-001184, Rule-ID|SV-223344r1043178_rule, STIG-ID|O365-LY-000001, Vuln-ID|V-223344

Plugin: Windows

Control ID: 53995bbe1376615bf835cc3357115cacfb23eef7a12e4803d1226a4208d23ce3