01-05-2021 07:50 AM
It is our corporate policy standard to disable NetBIOS over TCP/IP for the IPv4 component of all network adapters on corporate devices as a preventative security measure. This is achievable via powershell scripting on all Windows devices. However, we run into issues with the PANGP Virtual Ethernet Adapters being created by the GP 5.1.x software with default Windows settings, which have NetBIOS over TCP/IP enabled. Even if we disable this, it will be enabled on next device restart.
Is there an option in the GP Portal or a registry key to manage this setting so that it doesn't default on when the PANGP VEA is created or refreshed?
The only way I've been able to think of to handle this is to run our powershell script that disables this function as a post-connect script, but I don't believe the GP Agent would have the appropriate access permissions to make the change.
06-25-2021 01:48 AM
Hi Jsykora,
Answering your question, there is no possibility to disable the NETBIOS service from the GP configuration.
However, you can disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter on the client machine.
network setting ----->Select TCP/IP v4 ------>advanced---->WINS----->Disable NetBIOS option.
You can disable NetBIOS for the specific network adapter in the registry as well. Each network adapter has a separate branch in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces containing its TCPIP-GUID.
https://www.reddit.com/r/networking/comments/8wkye8/anyconnect_clients_spamming_netbios/
Click Accept as Solution to acknowledge that the answer to your question has been provided.
The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!
These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!
The LIVEcommunity thanks you for your participation!
