[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244411

 
 

909

 
 

193363

 
 

277

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-35992-7

Platform: win2012r2Date: (C)2015-10-08   (M)2022-10-10



Enable connection through RD Gateway If you enable this policy setting, when Remote Desktop Connection cannot connect directly to a remote computer (an RD Session Host server or a computer with Remote Desktop enabled), the clients will attempt to connect to the remote computer through an RD Gateway server. In this case, the clients will attempt to connect to the RD Gateway server that is specified in the 'Set RD Gateway server address' policy setting. You can enforce this policy setting or you can allow users to overwrite this setting. By default, when you enable this policy setting, it is enforced. When this policy setting is enforced, users cannot override this setting, even if they select the 'Use these RD Gateway server settings' option on the client. Note: To enforce this policy setting, you must also specify the address of the RD Gateway server by using the 'Set RD Gateway server address' policy setting, or client connection attempts to any remote computer will fail, if the client cannot connect directly to the remote computer. To enhance security, it is also highly recommended that you specify the authentication method by using the 'Set RD Gateway authentication method' policy setting. If you do not specify an authentication method by using this policy setting, either the NTLM protocol that is enabled on the client or a smart card can be used. To allow users to overwrite this policy setting, select the 'Allow users to change this setting' check box. When you do this, users on the client can choose not to connect through the RD Gateway server by selecting the 'Do not use an RD Gateway server' option. Users can specify a connection method by configuring settings on the client, using an RDP file, or using an HTML script. If users do not specify a connection method, the connection method that you specify in this policy setting is used by default. If you disable or do not configure this policy setting, clients will not use the RD Gateway server address that is specified in the 'Set RD Gateway server address' policy setting. If an RD Gateway server is specified by the user, a client connection attempt will be made through that RD Gateway server.


Parameter:


Technical Mechanism:

(1) GPO: User Configuration\Administrative Templates\Windows Components\Remote Desktop Services\RD Gateway!Enable connection through RD Gateway (2) REG: HKEY_CURRENT_USER\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services!UseProxy

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27240
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27240
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27240
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27240


OVAL    1
oval:org.secpod.oval:def:27240

© SecPod Technologies