Details

If this policy is enabled, it causes the Windows Server Message Block (SMB) server to perform SMB packet signing.

Solution

Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> ‘Microsoft Network Server- Digitally sign communications (if Client agrees)’ to ‘Enabled’.

Supportive Information

The following resource is also helpful.

• http://iasecontent.disa.mil/stigs/zip/Oct2016/U_Windows_Vista_V6R41_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-8
• 800-53|SC-8(1)
• CAT|II
• CCI|CCI-002418
• CCI|CCI-002421
• CSCv6|13
• Rule-ID|SV-29026r1_rule
• STIG-ID|3.046
• Vuln-ID|V-1162

Source

• Tenable.com/audits