UCF STIG Viewer Logo

The IP-HTTPS IPv6 transition technology must be disabled.


Overview

Finding ID Version Rule ID IA Controls Severity
V-26576 WN12-CC-000008 SV-52969r1_rule Medium
Description
IPv6 transition technologies, which tunnel packets through other protocols, do not provide visibility.
STIG Date
Windows Server 2012 / 2012 R2 Domain Controller Security Technical Implementation Guide 2016-12-19

Details

Check Text ( C-47275r1_chk )
If the following registry value does not exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \Software\Policies\Microsoft\Windows\TCPIP\v6Transition\IPHTTPS\IPHTTPSInterface\

Value Name: IPHTTPS_ClientState

Type: REG_DWORD
Value: 3
Fix Text (F-45895r1_fix)
Configure the policy value for Computer Configuration -> Administrative Templates -> Network -> TCPIP Settings -> IPv6 Transition Technologies -> "Set IP-HTTPS State" to "Enabled: Disabled State".

Note: "IPHTTPS URL:" must be entered in the policy even if set to Disabled State. Enter "about:blank".