3.113 - Outgoing secure channel traffic will be encrypted or signed.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Requests sent on the secure channel are authenticated, and sensitive information (such as passwords) is encrypted, but not all information is encrypted. If this policy is enabled, outgoing secure channel traffic will be encrypted and signed.

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> 'Domain Member: Digitally encrypt or sign secure channel data (always)' to 'Enabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Windows_2008_R2_MS_V1R33_STIG.zip

Item Details

Category: IDENTIFICATION AND AUTHENTICATION

References: 800-53|IA-3(1), CAT|II, CCI|CCI-002418, CCI|CCI-002421, CSCv6|13, Rule-ID|SV-32365r1_rule, STIG-ID|3.113, Vuln-ID|V-6831

Plugin: Windows

Control ID: dea8540a3fce74df7c77b5fc027339e7209245e62c4df564dc56e20f9c97e878