Block remote MS-EVEN functionality with RPC Filters If Microsoft EventLog Remoting Protocol (MS-EVEN) is not required, administrators should block the remote MS-EVEN functionality on the vulnerable host using RPC filters. Create a text file with the following content:...

Block remote MS-DFSNM functionality with RPC Filters If Microsoft Distributed File System (DFS) Namespace Management Protocol (MS-DFSNM) is not required, administrators should block the remote MS-DFSNM functionality for non-Domain Admins on the vulnerable host using...

Block remote MS-RPRN functionality with RPC Filters If Microsoft Print System Remote Protocol (MS-RPRN) is not required, administrators should block the remote MS-RPRN functionality on the vulnerable host using RPC filters. Create a text file with the following...

Block remote MS-FSRVP functionality with RPC Filters If Microsoft File Server Remove VSS Protocol (MS-FSRVP) is not required, administrators should block the remote MS-FSRVP functionality for non-Domain Admins on the vulnerable host using RPC filters. Create a text...

Block remote EFSRPC functionality with RPC Filters If Microsoft Encrypted File System Remote Protocol (MS-EFSRPC) is not required, administrators should block the remote EFSRPC functionality on the vulnerable host using RPC filters. Create a text file with the...

Table of Contents Option 1: Disable JMX Option 2: Configure a Whitelist Firewall Option 3: Configure User Authentication on the JMX Server Option 1: Disable JMX JMX is only required if you need remote management and monitoring of a Java-based application or the Java...

Apply the February 9, 2021 Security Patch to the Host Microsoft released a patch on February 9, 2021 addressing this vulnerability. To install it, apply the latest security updates on every Domain Controller. For more information, see CVE-2020-1472 Security Bulletin

Table of Contents Option 1: Patch the Host Option 2: Enable NLA on the Host Option 1: Patch the Host Microsoft released patches, KB4493471 and KB4493472, addressing this vulnerability. Install one of the patches from the Microsoft Update Catalog for the corresponding...

Table of Contents Option 1: Remove Dangling CNAME Option 2: Update CNAME Option 1: Remove Dangling CNAME If the subdomain is no longer in use, then from your DNS zone, remove the subdomain’s DNS record. Review application code and configuration for references to...

Table of Contents Option 1: Upgrade vCenter Instance Option 2: Disable Plugins on Virtual Server Appliance Deployments Option 3: Disable Plugins on Windows-based vCenter Server Deployments Validation Option 1: Upgrade your vCenter Instance Upgrade the major release...