Detections
Analytics

1.239 WN22-SO-000320

Information

Windows Server 2022 must be configured to at least negotiate signing for LDAP client signing.

GROUP ID: V-254476
RULE ID: SV-254476r991589

This setting controls the signing requirements for LDAP clients. This must be set to 'Negotiate signing' or 'Require signing', depending on the environment and type of LDAP server in use.

Solution

Configure the policy value for

Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> Network security: LDAP client signing requirements to 'Negotiate signing' at a minimum

See Also

https://workbench.cisecurity.org/benchmarks/22357

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-254476r991589_rule, STIG-ID|WN22-SO-000320, Vuln-ID|V-254476

Plugin: Windows

Control ID: 4293913fd2e822b2e9948fcbc4d8ae9f81f1d0b9f665f8f0c7ad55368cb42f55