WN11-00-000395 - Windows 11 must not have portproxy enabled or in use.

Information

Having portproxy enabled or configured in Windows 10 could allow a man-in-the-middle attack.

Solution

Contact the Administrator to run 'netsh interface portproxy delete' with elevation. Remove any enabled portproxies that may be configured.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R11_STIG.zip

Item Details

Audit Name: DISA Microsoft Windows 11 STIG v2r11

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-257592r1268251_rule, STIG-ID|WN11-00-000395, Vuln-ID|V-257592

Plugin: Windows

Control ID: c7e16f72d19a46aacccf28c458fd48b0afc3a7eb2f250b87936225025b590bcd