3.3 Disable WebRTC - media.peerconnection.use_document_iceservers

Information

These settings determine whether Web Real Time Communications (WebRTC) is allowed. WebRTC is used for peer-to-peer communication such as file sharing or video calls.

Rationale:

WebRTC can expose private information such as internal IP addresses and computer settings.

Impact:

WebRTC will not be accessible to users.

Solution

To establish the recommended configuration, set the following values to false:

media.peerconnection

media.peerconnection.use_document_iceservers

Type about:config in the address bar

Type media.peerconnection in the filter

Ensure the setting is set as prescribed.

Type media.peerconnection.use_document_iceservers in the filter

Ensure the setting is set as prescribed.

OR

Open the mozilla.cfg file in the installation directory with a text editor

Add the following lines to mozilla.cfg:

lockPref('media.peerconnection.enabled', false);
lockPref('media.peerconnection.use_document_iceservers', false);

Default Value:

True

See Also

https://workbench.cisecurity.org/files/4299

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-7b.

Plugin: Windows

Control ID: b7e719de266e019d6cb1ffa02406b32f43a6e1f65649cde7152922ed651b9cf6