The system must be configured to send error reports on TCP port 1232.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-57461	WINER-000009	SV-71885r1_rule	ECSC-1	Medium

Description
An error reporting site's TCP port must be defined in the local system in order to forward data from local systems via TCP. Port 1232 is the recommended port setting.

STIG	Date
Windows 2008 Member Server Security Technical Implementation Guide	2016-05-12

Details

Check Text ( C-58315r1_chk )
This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see V-57457). If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\ Value Name: CorporateWerPortNumber Type: REG_DWORD Value: 0x000004d0 (1232)

Check Text ( C-58315r1_chk )

This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see V-57457).

If the following registry value does not exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\

Value Name: CorporateWerPortNumber

Type: REG_DWORD
Value: 0x000004d0 (1232)

Fix Text (F-62675r1_fix)
This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see V-57457). Configure the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Windows Error Reporting -> Advanced Error Reporting Settings -> "Configure Corporate Windows Error Reporting" to "Enabled" with "1232" defined as the "Server Port".