Ensure 'NTLM' is set to 'Disabled'

HochStufe 1Automatisiertfirefox

Beschreibung

This policy setting controls the use of NT Lan Manager (NTLM) v1 protocol. This protocol is used for authentication to resources. The recommended state for this setting is: Disabled. Rationale: NTLM v1 contains cryptographic weaknesses that can be easily exploited to obtain user credentials. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Mozilla\Firefox\Authentication\NTLM is missing or empty, otherwise the configured entries.

So wird geprüft

Prüfmethode: Windows-Registrierung

registry

$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\Authentication\NTLM' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }

Erwartete Ausgabe: absent

So wird behoben

Behebungsmethode: Anleitung oder Infrastruktur-Patch

Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Mozilla\Firefox\Authentication\NTLM = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Mozilla\Firefox\Authentication\NTLM after reviewing them.

Eigenschaften

Betriebssysteme: Beliebig
Tags: firefoxbrowsercis-l1
Referenz: CIS Mozilla Firefox ESR GPO Benchmark v1.0.0 - 1.1.2.1 Ensure 'NTLM' is set to 'Disabled'

Diesen Host prüfen

Führen Sie dies auf einem Rechner aus, den Sie prüfen dürfen. Der Scan ist schreibgeschützt.

shell

tmaegis scan --target firefox