Details

The net.http.enabled parameter is used to enable or disable the HTTP interface.

Please note that this function has been Deprecated since version 3.2.

Rationale:

Additional network interfaces expose the system to a greater extent. Running unnecessary services may allow an attacker to penetrate the system via an unknown vulnerability.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Set the parameter value to false to disable the HTTPinterface.

Default Value:

false

Supportive Information

The following resource is also helpful.

• https://workbench.cisecurity.org/files/168

This security hardening control applies to the following category of controls within NIST 800-53: Configuration Management.This control applies to the following type of system Windows.

References

• 800-53|CM-7b.

Source

• Tenable.com/audits