1.1.3.9.9 Configure 'MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic.'

Information

These filters make it possible for Internet Key Exchange (IKE) and the Kerberos authentication protocol to function.

Solution

Make sure NoDefaultExempt is set to your organization's security policy.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8

Plugin: Windows

Control ID: 3d96729aa19dbf572c7363fa83bd050aa35688aa741c3f859fbb2001761275ed