1.117 WN11-CC-000044

Information

Internet connection sharing must be disabled.

GROUP ID: V-253361
RULE ID: SV-253361r958478

Internet connection sharing makes it possible for an existing internet connection, such as through wireless, to be shared and used by other systems essentially creating a mobile hotspot. This exposes the system sharing the connection to others with potentially malicious purpose.

Solution

Configure the policy value for

Computer Configuration >> Administrative Templates >> Network >> Network Connections >> 'Prohibit use of Internet Connection Sharing on your DNS domain network'

to 'Enabled'.

See Also

https://workbench.cisecurity.org/benchmarks/27756