[Forgot Password]
Login  Register Subscribe

30430

 
 

423868

 
 

247768

 
 

909

 
 

194555

 
 

282

Paid content will be excluded from the download.


Download | Alert*
OVAL

Hash Publication for BranchCache

ID: oval:org.secpod.oval:def:19282Date: (C)2014-05-29   (M)2023-07-14
Class: COMPLIANCEFamily: windows




The Hash Publication for BranchCache machine setting should be configured correctly. This policy enables a hash generation service to generate hashes for data stored in shared folders, and then provide these hashes to client computers on which BranchCache is enabled. Hashes are mathematically-derived digital fingerprints of files that uniquely identify the contents of files. These digital fingerprints are very small, enabling Windows to compare files without consuming a significant amount of Wide Area Network (WAN) bandwidth. A client computer in a branch office can obtain a hash for a file across a WAN link if all of the following conditions are true: 1) The user has permissions to access the file. 2) BranchCache is enabled on the client computer. 3) Hash publication is permitted on the shared folder that the client computer is accessing. If the client computer obtains the hash, the computer can then search for an identical version of the file in the cache of other computers in the branch office. If Windows finds an identical version of the file in the branch office, the client computer downloads the locally-cached copy instead of downloading the file across the WAN link. If you configure this policy to "Allow hash publication only for shared folders on which BranchCache is enabled" (value = 0), hashes are generated only for shared folders on which BranchCache is enabled. Hashes for these shared folders are generated when either of the following events occurs: 1) A file is accessed in a shared folder on which BranchCache is enabled by a client with BranchCache support enabled. 2) An administrator manually generates hashes using the command-line tool Hashgen. If you configure this policy to "Disallow hash publication on all shared folders" (value = 1), hashes are never generated or provided by computers on which this policy is applied. If you configure this policy to "Allow hash publication for all shared folders" (value = 2), hashes are generated for all shared folders on the server when either of the following events occurs: 1) A file is accessed in a shared folder on the server by a client with BranchCache support enabled. 2) An administrator manually generates hashes using the command-line tool Hashgen. Fix: (1) GPO: Computer Configuration\Administrative Templates\Network\Lanman Server\Hash Publication for BranchCache (2) KEY: HKLM\Software\Policies\Microsoft\Windows\LanmanServer\HashPublicationForPeerCaching

Platform:
Microsoft Windows Server 2008 R2
Reference:
CCE-11440-5
CPE    1
cpe:/o:microsoft:windows_server_2008:r2
CCE    1
CCE-11440-5
XCCDF    1
xccdf_org.secpod_benchmark_general_Windows_Server_2008_R2

© SecPod Technologies