Detections
Analytics
3.104 - The system is configured to detect and configure default gateway addresses.
Information
Enables or disables the Internet Router Discovery Protocol (IRDP) used to detect and configure Default Gateway addresses on the computer.Solution
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'MSS: (PerformRouterDiscovery) Allow IRDP to detect and configure Default Gateway addresses (could lead to DoS)' to 'Disabled'.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2008_DC_V6R47_STIG.zip
Item Details
Audit Name: DISA Windows Server 2008 DC STIG v6r47
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-7(12), CAT|III, CCI|CCI-002385, CSCv6|9, CSCv6|9.2, Rule-ID|SV-29367r1_rule, STIG-ID|3.104, Vuln-ID|V-4112
Plugin: Windows
Control ID: 5739c943a0dc945a40a7280cf2b04701928ae13321e330edf7681e02b2ac2e26