Skip to main content

💼 7.1.2 Ensure that WinRM Access from the Internet is Evaluated and Restricted (Automated)

  • ID: /frameworks/cis-azure-v7.0.0/07/01/02

Stats​

not available

Description​

Network security groups should be periodically evaluated for port misconfigurations. Where Windows Remote Management (WinRM) access (TCP ports 5985 and 5986) is not explicitly required and narrowly configured for resources attached to a network security group, Internet-level access to Azure resources should be restricted or eliminated.

Similar​

Sub Sections​

SectionSub SectionsInternal RulesPoliciesFlagsCompliance

Policies (1)​

PolicyLogic CountFlagsCompliance
🛡️ Azure Network Security Group allows unrestricted WinRM traffic🟢1🟢 x6no data