CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark
Control
Set Correctly Yes No
5.36
(L1) Ensure 'Windows Mobile Hotspot Service (icssvc)' is set to 'Disabled' (Scored) (L2) Ensure 'Windows Push Notifications System Service (WpnService)' is set to 'Disabled' (Scored) (L2) Ensure 'Windows PushToInstall Service (PushToInstall)' is set to 'Disabled' (Scored) (L2) Ensure 'Windows Remote Management (WS- Management) (WinRM)' is set to 'Disabled' (Scored) (L1) Ensure 'WorldWide Web Publishing Service (W3SVC)' is set to 'Disabled' or 'Not Installed' (Scored) (L1) Ensure 'Xbox Accessory Management Service (XboxGipSvc)' is set to 'Disabled' (Scored) (L1) Ensure 'Xbox Live Auth Manager (XblAuthManager)' is set to 'Disabled' (Scored) (L1) Ensure 'Xbox Live Game Save (XblGameSave)' is set to 'Disabled' (Scored) (L1) Ensure 'Windows Firewall: Domain: Firewall state' is set to 'On (recommended)' (Scored) (L1) Ensure 'Windows Firewall: Domain: Inbound connections' is set to 'Block (default)' (Scored) (L1) Ensure 'Windows Firewall: Domain: Outbound connections' is set to 'Allow (default)' (Scored) (L1) Ensure 'Windows Firewall: Domain: Settings: Display a notification' is set to 'No' (Scored) (L1) Ensure 'Windows Firewall: Domain: Logging: Name' is set to '%SystemRoot%\System32\logfiles\firewall\domainfw.log' (Scored) (L1) Ensure 'Windows Firewall: Domain: Logging: Size limit (KB)' is set to '16,384 KB or greater' (Scored) (L1) Ensure 'Windows Firewall: Domain: Logging: Log dropped packets' is set to 'Yes' (Scored) (L1) Ensure 'Windows Firewall: Domain: Logging: Log successful connections' is set to 'Yes' (Scored) (L1) Ensure 'Xbox Live Networking Service (XboxNetApiSvc)' is set to 'Disabled' (Scored) Registry File System Wired Network (IEEE 802.3) Policies Windows Firewall with Advanced Security Domain Profile
5.37
5.38
5.39
5.40
5.41
5.42
5.43
5.44
6 7 8 9
9.1
9.1.1
9.1.2
9.1.3
9.1.4
9.1.5
9.1.6
9.1.7
9.1.8
1247 | P a g e
Made with FlippingBook - Online magazine maker