Do not allow sessions without mutual CHAPID: oval:org.secpod.oval:def:27571 | Date: (C)2015-10-08 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
If enabled then only those sessions that are configured for mutual CHAP may be established. If disabled then sessions that are configured for mutual CHAP or sessions not configured for mutual CHAP may be established.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\iSCSI\iSCSI Security!Do not allow sessions without mutual CHAP
(2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\iSCSI!RequireMutualCHAP
Platform: |
Microsoft Windows Server 2012 R2 |