Detections
Analytics

WN10-CC-000350 - The Windows Remote Management (WinRM) service must not allow unencrypted traffic.

Information

Unencrypted remote access to a system can allow sensitive information to be compromised. Windows remote management connections must be encrypted to prevent this.

Solution

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Remote Management (WinRM) >> WinRM Service >> 'Allow unencrypted traffic' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R6_STIG.zip

Item Details

Category: MAINTENANCE

References: 800-53|MA-4(6), CAT|II, CCI|CCI-002890, CCI|CCI-003123, Rule-ID|SV-220866r958848_rule, STIG-ID|WN10-CC-000350, STIG-Legacy|SV-77859, STIG-Legacy|V-63369, Vuln-ID|V-220866

Plugin: Windows

Control ID: 67bbb056cc66d74fc1655f4ecbd7d71ae97faa0caf91a61847097895097c97d5