AD-SUB-07: Non-RFC1918 (public IP) subnets details should be retrievable
| ID | AD-SUB-07 |
| Severity | Info |
| Suite | Active Directory (on-premises) |
| Product | Active Directory |
| Feature | Sites and subnets |
| Security area | Infrastructure hardening |
| Resource type | AdSite |
| Reads from | On-premises Active Directory |
What this checks and how to fix it
Section titled “What this checks and how to fix it”Detailed information about public IP subnet usage helps:
- Identify misconfigurations: Find subnets that should use private ranges
- Assess security posture: Evaluate exposure of internal resources
- Plan remediation: Prioritize subnet renumbering efforts
- Document exceptions: Record legitimate uses of public IPs
Each public IP subnet should be reviewed for proper isolation and business justification.
Control Type
Section titled “Control Type”Detective
Security Recommendation
Section titled “Security Recommendation”For each public IP subnet:
- Verify if the use is intentional and justified
- Ensure proper network isolation is in place
- Document the business requirement
- Plan migration to private ranges if appropriate
- Review firewall and NAT configurations
How the Test Works
Section titled “How the Test Works”This test retrieves all subnets, identifies those using public IP ranges, and lists them with their site associations and descriptions.
Related Tests
Section titled “Related Tests”Test-MtAdSubnetNonInternalCount- Counts public IP subnetsTest-MtAdSubnetTotalCount- Counts total subnetsTest-MtAdSubnetSiteAssociationCount- Counts sites with subnets
Mito check. Author: soulemike. Open-source licences.
Open-source licences. CIS Benchmark material © Center for Internet Security, Inc.; CISA SCuBA baselines are public domain (CC0).
© 2026 Virtual Petals. Mito is a Virtual Petals service, hosted in Microsoft Azure UAE North.