WN11-00-000395 - Windows 11 must not have portproxy enabled or in use.

Information

Having portproxy enabled or configured in Windows 10 could allow a man-in-the-middle attack.

Solution

Contact the Administrator to run 'netsh interface portproxy delete' with elevation. Remove any enabled portproxies that may be configured.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_11_V2R7_STIG.zip

Item Details

Audit Name: DISA Microsoft Windows 11 STIG v2r7

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7a., CAT|II, CCI|CCI-000381, Rule-ID|SV-257592r991589_rule, STIG-ID|WN11-00-000395, Vuln-ID|V-257592

Plugin: Windows

Control ID: d79333e8671f7fa11550fb2fd15b98420b58ad04dba08be9a6ded671abaca785