Skip to main content

APPSTREAM controls (1)

CTL.APPSTREAM.INTERNET.001​

AppStream Fleets Must Disable Default Internet Access

  • Severity: medium
  • Type: unsafe_state
  • Domain: exposure
  • Compliance: nist_800_53_r5: SC-7; soc2: CC6.6;

AppStream fleets must disable default internet access. Fleets with default internet connectivity allow streaming sessions to reach the internet directly, bypassing network controls.

Remediation: Disable EnableDefaultInternetAccess and use VPC with NAT.