The system must be configured to send error reports on TCP port 1232.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-63529	WN10-ER-000045	SV-78019r1_rule		Medium

Description
An error reporting site's TCP port must be defined in the local system in order to forward data from local systems via TCP. Port 1232 is the recommended port setting.

STIG	Date
Windows 10 Security Technical Implementation Guide	2016-06-24

Details

Check Text ( C-64279r1_chk )
This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see WN10-ER-000035). If the following registry value does not exist or is not configured as specified, this is a finding: Registry Hive: HKEY_LOCAL_MACHINE Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\ Value Name: CorporateWerPortNumber Value Type: REG_DWORD Value: 0x000004d0 (1232)

Check Text ( C-64279r1_chk )

This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see WN10-ER-000035).

If the following registry value does not exist or is not configured as specified, this is a finding:

Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SOFTWARE\Policies\Microsoft\Windows\Windows Error Reporting\

Value Name: CorporateWerPortNumber

Value Type: REG_DWORD
Value: 0x000004d0 (1232)

Fix Text (F-69459r1_fix)
This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see WN10-ER-000035). Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Error Reporting >> Advanced Error Reporting Settings >> "Configure Corporate Windows Error Reporting" to "Enabled" with "1232" defined as the "Server Port".

Fix Text (F-69459r1_fix)

This requirement is NA if Windows Error Reporting is not configured to forward reports to a collection server (see WN10-ER-000035).

Configure the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Windows Error Reporting >> Advanced Error Reporting Settings >> "Configure Corporate Windows Error Reporting" to "Enabled" with "1232" defined as the "Server Port".