UCF STIG Viewer Logo

Outgoing secure channel traffic is not encrypted or signed.


Overview

Finding ID Version Rule ID IA Controls Severity
V-6831 3.113 SV-29382r1_rule ECCT-1 ECCT-2 Medium
Description
Requests sent on the secure channel are authenticated, and sensitive information (such as passwords) is encrypted, but not all information is encrypted. If this policy is enabled, outgoing secure channel traffic will be encrypted and signed.
STIG Date
Win2k8 Audit 2013-06-10

Details

Check Text ( None )
None
Fix Text (F-6518r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> “Domain Member: Digitally encrypt or sign secure channel data (always)” to “Enabled”.