[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248392

 
 

909

 
 

195452

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-47761-2

Platform: cpe:/o:microsoft:windows_server_2016Date: (C)2022-09-02   (M)2023-07-04



Enable or disable Microsoft Defender Exploit Guard network protection to prevent employees from using any application to access dangerous domains that may host phishing scams, exploit-hosting sites, and other malicious content on the Internet. Enabled:Specify the mode in the Options section:-Block: Users and applications will not be able to access dangerous domains-Audit Mode: Users and applications can connect to dangerous domains, however if this feature would have blocked access if it were set to Block, then a record of the event will be in the event logs. Disabled:Users and applications will not be blocked from connecting to dangerous domains. Not configured:Same as Disabled.Fix:(1) GPO: Computer ConfigurationAdministrative TemplatesWindows ComponentsMicrosoft Defender AntivirusMicrosoft Defender Exploit GuardNetwork ProtectionPrevent users and apps from accessing dangerous websites(2) REG: HKEY_LOCAL_MACHINESoftwarePoliciesMicrosoftWindows DefenderWindows Defender Exploit GuardNetwork Protection!EnableNetworkProtection


Parameter:

[enabled/disabled]


Technical Mechanism:

(1) GPO: Computer Configuration\Administrative Templates\Windows Components\Microsoft Defender Antivirus\Microsoft Defender Exploit Guard\Network Protection\Prevent users and apps from accessing dangerous websites (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows Defender\Windows Defender Exploit Guard\Network Protection!EnableNetworkProtection

CCSS Severity:CCSS Metrics:
CCSS Score : 6.4Attack Vector: NETWORK
Exploit Score: 1.6Attack Complexity: HIGH
Impact Score: 4.7Privileges Required: NONE
Severity: MEDIUMUser Interaction: REQUIRED
Vector: AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:LScope: UNCHANGED
 Confidentiality: HIGH
 Integrity: LOW
 Availability: LOW
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:83695


OVAL    1
oval:org.secpod.oval:def:83695
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_Server_2016

© SecPod Technologies