Detections
Analytics

5.43 (L1) Ensure 'WWAN AutoConfig Service (WwanSvc)' is set to 'Disabled'

Information

Service that manages mobile broadband (GSM & CDMA) data card/embedded module adapters and connections by auto-configuring the networks.

The recommended state for this setting is: Disabled

Note: In some instances, cellular data / mobile broadband is used by the EMS Gateway to transfer data in and out of the Election System. In this case, an exception to the policy that

Enables

the service, WwanSvc is considered in compliance with the benchmark.

Disabling the use of Mobile broadband devices (hotspots, portable WiFi etc) can reduce the attack surface of the system.

Solution

To establish the recommended configuration via GP, set the following UI path to: Disabled :

Computer Configuration\Policies\Windows Settings\Security Settings\System Services\WWAN AutoConfig

Impact:

Mobile broadband devices will not function on the system.

Note: In some instances, cellular data / mobile broadband is used by the EMS Gateway to transfer data in and out of the Election System. In this case, an exception to the policy that

Enables

the service, WwanSvc is considered in compliance with the benchmark.

See Also

https://workbench.cisecurity.org/benchmarks/17610

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: bc2285e9b8b9d976fe803b30ad2a3cf103ea9b67676f58f8cf01694c0a9c6ecf