Detections
Analytics

1.120 WN11-CC-000055

Information

Simultaneous connections to the internet or a Windows domain must be limited.

GROUP ID: V-253364
RULE ID: SV-253364r958358

Multiple network connections can provide additional attack vectors to a system and must be limited. The 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' setting prevents systems from automatically establishing multiple connections. When both wired and wireless connections are available, for example, the less preferred connection (typically wireless) will be disconnected.

Solution

The default behavior for 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is 'Enabled'.

If this needs to be corrected, configure the policy value for

Computer Configuration >> Administrative Templates >> Network >> Windows Connection Manager >> 'Minimize the number of simultaneous connections to the Internet or a Windows Domain'

to 'Enabled'. Under 'Options', set 'Minimize Policy Options' to '3 = Prevent Wi-Fi When on Ethernet'.

See Also

https://workbench.cisecurity.org/benchmarks/27756

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8, CCI|CCI-002418, Rule-ID|SV-253364r958358_rule, STIG-ID|WN11-CC-000055, Vuln-ID|V-253364

Plugin: Windows

Control ID: 7ac4ff111ff1dc1096fef3c9f93139d305973fac70d923dd57293e0abe817828