UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The IP-HTTPS IPv6 transition technology must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-26576 WN12-CC-000008 SV-52969r1_rule ECSC-1 Medium
Description
IPv6 transition technologies, which tunnel packets through other protocols, do not provide visibility.
STIG Date
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide 2014-06-30

Details

Check Text ( C-47275r1_chk )
If the following registry value does not exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface\

Value Name: IPHTTPS_ClientState

Type: REG_DWORD
Value: 3
Fix Text (F-45895r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> TCPIP Settings -> IPv6 Transition Technologies -> "Set IP-HTTPS State" to "Enabled: Disabled State".

Note: "IPHTTPS URL:" must be entered in the policy even if set to Disabled State. Enter "about:blank".