[Forgot Password]
Login  Register Subscribe

30479

 
 

423868

 
 

248268

 
 

909

 
 

195051

 
 

282

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-37331-6

Platform: win2012r2Date: (C)2015-10-08   (M)2022-10-10



Hash Publication for BranchCache This policy enables a hash generation service to generate hashes for data stored in shared folders, and then provide these hashes to client computers on which BranchCache is enabled. Hashes are mathematically-derived digital fingerprints of files that uniquely identify the contents of files. These digital fingerprints are very small, enabling Windows to compare files without consuming a significant amount of Wide Area Network (WAN) bandwidth. A client computer in a branch office can obtain a hash for a file across a WAN link if all of the following conditions are true: 1) The user has permissions to access the file. 2) BranchCache is enabled on the client computer. 3) Hash publication is permitted on the shared folder that the client computer is accessing. If the client computer obtains the hash, the computer can then search for an identical version of the file in the cache of other computers in the branch office. If Windows finds an identical version of the file in the branch office, the client computer downloads the locally-cached copy instead of downloading the file across the WAN link. If you configure this policy to 'Allow hash publication only for shared folders on which BranchCache is enabled' (value = 0), hashes are generated only for shared folders on which BranchCache is enabled. Hashes for these shared folders are generated when either of the following events occurs: 1) A file is accessed in a shared folder on which BranchCache is enabled by a client with BranchCache support enabled. 2) An administrator manually generates hashes using the command-line tool Hashgen. If you configure this policy to 'Disallow hash publication on all shared folders' (value = 1), hashes are never generated or provided by computers on which this policy is applied. If you configure this policy to 'Allow hash publication for all shared folders' (value = 2), hashes are generated for all shared folders on the server when either of the following events occurs: 1) A file is accessed in a shared folder on the server by a client with BranchCache support enabled. 2) An administrator manually generates hashes using the command-line tool Hashgen.


Parameter:


Technical Mechanism:

(1) GPO: Computer Configuration\Administrative Templates\Network\Lanman Server!Hash Publication for BranchCache (2) WMI: ###

CCSS Severity:CCSS Metrics:
CCSS Score : Attack Vector:
Exploit Score: Attack Complexity:
Impact Score: Privileges Required:
Severity: User Interaction:
Vector: Scope:
 Confidentiality:
 Integrity:
 Availability:
  

References:
Resource IdReference


XCCDF    1

© SecPod Technologies