Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?

jsykora — Tue, 05 Jan 2021 15:50:44 GMT

It is our corporate policy standard to disable NetBIOS over TCP/IP for the IPv4 component of all network adapters on corporate devices as a preventative security measure. This is achievable via powershell scripting on all Windows devices. However, we run into issues with the PANGP Virtual Ethernet Adapters being created by the GP 5.1.x software with default Windows settings, which have NetBIOS over TCP/IP enabled. Even if we disable this, it will be enabled on next device restart.

Is there an option in the GP Portal or a registry key to manage this setting so that it doesn't default on when the PANGP VEA is created or refreshed?

The only way I've been able to think of to handle this is to run our powershell script that disables this function as a post-connect script, but I don't believe the GP Agent would have the appropriate access permissions to make the change.

Re: Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?

mcepiel — Fri, 25 Jun 2021 08:48:15 GMT

Hi Jsykora,

Answering your question, there is no possibility to disable the NETBIOS service from the GP configuration.

However, you can disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter on the client machine.
network setting ----->Select TCP/IP v4 ------>advanced---->WINS----->Disable NetBIOS option.

You can disable NetBIOS for the specific network adapter in the registry as well. Each network adapter has a separate branch in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces containing its TCPIP-GUID.
https://www.reddit.com/r/networking/comments/8wkye8/anyconnect_clients_spamming_netbios/

topic Re: Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter? in GlobalProtect Discussions

Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?

Re: Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?