WN10-00-000395 - Windows 10 must not have portproxy enabled or in use.

Information

Having portproxy enabled or configured in Windows 10 could allow a man-in-the-middle attack.

Solution

Contact the Administrator to run 'netsh interface portproxy delete' with elevation. Remove any enabled portproxies that may be configured.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_10_V3R6_STIG.zip

Item Details

Audit Name: DISA Microsoft Windows 10 STIG v3r6

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-257593r991589_rule, STIG-ID|WN10-00-000395, Vuln-ID|V-257593

Plugin: Windows

Control ID: b7f6d558d3b01879f6668fb31e36b658e2e557283ac8e6589b71a77430485f34