WN11-00-000395 - Windows 11 must not have portproxy enabled or in use.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Having portproxy enabled or configured in Windows 10 could allow a man-in-the-middle attack.

Solution

Contact the Administrator to run 'netsh interface portproxy delete' with elevation. Remove any enabled portproxies that may be configured.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R6_STIG.zip

Item Details

Audit Name: DISA Microsoft Windows 11 STIG v2r6

References: CAT|II, CCI|CCI-000381, Rule-ID|SV-257592r991589_rule, STIG-ID|WN11-00-000395, Vuln-ID|V-257592

Plugin: Windows

Control ID: d79333e8671f7fa11550fb2fd15b98420b58ad04dba08be9a6ded671abaca785