Detections
Analytics

12.52 Multiple listeners - 'Create separate listeners for client and administratorion'

Information

An administrative listener, protected by IPSec, could allow administrators access to the server if the client listener(s) fail. Preference
of implementation is IPSec ESP, otherwise SSL and host-based firewall. If SSL is not possible, use OAS native encryption/integrity with a
host firewall.. Access must be limited to specific administrative workstations.
Level 2, Not Scorable
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.as manual verification is required to confirm a separate administration listener is configured.

See Also

https://workbench.cisecurity.org/files/580

Item Details

Plugin: Windows

Control ID: b3c5c5f8bc9fdf309d4f4c6b2f0739aadf48d307e5669c6058361e7b2b763942