Detections
Analytics
3.094 - The system is configured to allow IP source routing.
Information
Protects against IP source routing spoofing.Solution
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'MSS- (DisableIPSourceRouting) IP source routing protection level (protects against packet spoofing)' to 'Highest protection, source routing is completely disabled'.See Also
http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip
Item Details
Audit Name: DISA Windows Vista STIG v6r41
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|III, CCI|CCI-000366, Rule-ID|SV-29360r1_rule, STIG-ID|3.094, Vuln-ID|V-4110
Plugin: Windows
Control ID: 73d902bb81d23bec5f8ab5cd4548b2ea3a43118ae0cdd0098c4a008db10b9405