WN10-CC-000055 - Simultaneous connections to the internet or a Windows domain must be limited.

Information

Multiple network connections can provide additional attack vectors to a system and must be limited. The 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' setting prevents systems from automatically establishing multiple connections. When both wired and wireless connections are available, for example, the less-preferred connection (typically wireless) will be disconnected.

Solution

The default behavior for 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' is 'Enabled'.

If this must be corrected, configure the policy value for Computer Configuration >> Administrative Templates >> Network >> Windows Connection Manager >> 'Minimize the number of simultaneous connections to the Internet or a Windows Domain' to 'Enabled'.

Under 'Options', set 'Minimize Policy Options' to '3 = Prevent Wi-Fi When on Ethernet'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R6_STIG.zip

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-220806r991589_rule, STIG-ID|WN10-CC-000055, STIG-Legacy|SV-78071, STIG-Legacy|V-63581, Vuln-ID|V-220806

Plugin: Windows

Control ID: ed367817acb5defd125c96e3b0522d2368662d2c96dc943645c77f94c4570b83