Ensure 'NTLM' is set to 'Disabled'

VisokaNivo 1Automatskafirefox

Opis

This policy setting controls the use of NT Lan Manager (NTLM) v1 protocol. This protocol is used for authentication to resources. The recommended state for this setting is: Disabled. Rationale: NTLM v1 contains cryptographic weaknesses that can be easily exploited to obtain user credentials. The policy is Disabled when it is not present: the audit prints 'absent' when the list key HKLM\SOFTWARE\Policies\Mozilla\Firefox\Authentication\NTLM is missing or empty, otherwise the configured entries.

Kako se proverava

Metod provere: Windows registar

registry

$l = @((Get-ItemProperty -Path 'Registry::HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Mozilla\Firefox\Authentication\NTLM' -ErrorAction SilentlyContinue).PSObject.Properties | Where-Object { $_.Name -notlike 'PS*' } | ForEach-Object { "$($_.Value)" }); if ($l.Count -eq 0) { 'absent' } else { 'configured: ' + ($l -join ', ') }

Očekivani izlaz: absent

Kako se ispravlja

Metod ispravke: Smernica ili zakrpa infrastrukture

Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Mozilla\Firefox\Authentication\NTLM = Disabled. Locally, remove the policy entries at HKLM\SOFTWARE\Policies\Mozilla\Firefox\Authentication\NTLM after reviewing them.

Svojstva

Operativni sistemi: Bilo koji
Oznake: firefoxbrowsercis-l1
Referenca: CIS Mozilla Firefox ESR GPO Benchmark v1.0.0 - 1.1.2.1 Ensure 'NTLM' is set to 'Disabled'

Proverite ovaj računar

Pokrenite ovo na računaru za koji imate dozvolu za proveru. Skeniranje radi u režimu samo za čitanje.

shell

tmaegis scan --target firefox