1.1.3.8.3 Set 'Microsoft network server: Digitally sign communications (if client agrees)' to 'Enabled'

Information

This policy setting determines if the server side SMB service is able to sign SMB packets if it is requested to do so by a
client that attempts to establish a connection.

Solution

Make sure 'Microsoft network server: Digitally sign communications (if client agrees)' is enabled.

See Also

https://workbench.cisecurity.org/files/17

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-13, CSCv6|13

Plugin: Windows

Control ID: 16782757e98ea3117539ad2ac95cd11a38965d6c9a05dd774517f4aa484b3c16