Detections
Analytics

1.232 WN16-SO-000330

Information

NTLM must be prevented from falling back to a Null session.

GROUP ID: V-225050
RULE ID: SV-225050r991589

NTLM sessions that are allowed to fall back to Null (unauthenticated) sessions may gain unauthorized access.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> 'Network security: Allow LocalSystem NULL session fallback'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/23093

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-225050r991589_rule, STIG-ID|WN16-SO-000330, Vuln-ID|V-225050

Plugin: Windows

Control ID: 138eff741a1a4b7e21263ec4513002f114a5b7acf6dfa35a26afad4beb860dde