Detections
Analytics
WN11-CC-000060 - Connections to non-domain networks when connected to a domain authenticated network must be blocked.
Information
Multiple network connections can provide additional attack vectors to a system and must be limited. When connected to a domain, communication must go through the domain connection.Solution
Configure the policy value for Computer Configuration >> Administrative Templates >> Network >> Windows Connection Manager >> 'Prohibit connection to non-domain networks when connected to domain authenticated network' to 'Enabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip
Item Details
Audit Name: DISA Microsoft Windows 11 STIG v2r11
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-253365r1268251_rule, STIG-ID|WN11-CC-000060, Vuln-ID|V-253365
Plugin: Windows
Control ID: 09537e56fe10a74b48d60bc1904261d61cc855dd32144e8b7ddaea395b63c01c