MSS: (KeepAliveTime) How often keep-alive packets are sent in millisecondsID: oval:org.secpod.oval:def:8730 | Date: (C)2013-01-21 (M)2023-05-09 |
Class: COMPLIANCE | Family: windows |
The MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds setting should be configured correctly.
The registry value entry KeepAliveTime was added to the template file in the HKEY_LOCAL_MACHINE\\System\\CurrentControlSet\\Services\\Tcpip\\Parameters\\ registry key. The entry appears as MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds (300,000 is recommended) in the SCE. This value controls how often TCP attempts to verify that an idle connection is still intact by sending a keep-alive packet. If the remote computer is still reachable, it acknowledges the keep-alive packet.
Fix:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\MSS: (KeepAliveTime) How often keep-alive packets are sent in milliseconds
(2) KEY: HKLM\System\CurrentControlSet\Services\Tcpip\Parameters\KeepAliveTime
Platform: |
Microsoft Windows Server 2008 R2 |