UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

Windows 11 must not have portproxy enabled or in use.


Overview

Finding ID Version Rule ID IA Controls Severity
V-257592 WN11-00-000395 SV-257592r922047_rule Medium
Description
Having portproxy enabled or configured in Windows 10 could allow a man-in-the-middle attack.
STIG Date
Microsoft Windows 11 Security Technical Implementation Guide 2023-09-29

Details

Check Text ( C-61332r922045_chk )
Check the registry key for existence of proxied ports:
HKLM\SYSTEM\CurrentControlSet\Services\PortProxy\.

If the key contains v4tov4\tcp\ or is populated v4tov4\tcp\, this is a finding.

Run "netsh interface portproxy show all".

If the command displays any results, this is a finding.
Fix Text (F-61256r922046_fix)
Contact the Administrator to run "netsh interface portproxy delete" with elevation. Remove any enabled portproxies that may be configured.