NetworkSecuritySettings Class

Definition

public ref class NetworkSecuritySettings sealed

/// [Windows.Foundation.Metadata.ContractVersion(Windows.Foundation.UniversalApiContract, 65536)]
/// [Windows.Foundation.Metadata.MarshalingBehavior(Windows.Foundation.Metadata.MarshalingType.Agile)]
class NetworkSecuritySettings final

[Windows.Foundation.Metadata.ContractVersion(typeof(Windows.Foundation.UniversalApiContract), 65536)]
[Windows.Foundation.Metadata.MarshalingBehavior(Windows.Foundation.Metadata.MarshalingType.Agile)]
public sealed class NetworkSecuritySettings

Public NotInheritable Class NetworkSecuritySettings

Inheritance

Object Platform::Object IInspectable NetworkSecuritySettings

Attributes

ContractVersionAttribute MarshalingBehaviorAttribute

Windows requirements

Examples

Implementing security-based application policies

using Windows.Networking.Connectivity;

private bool _listeningForChanges;

private void EvaluateNetworkSecurityPolicy()
{
    var internetProfile = NetworkInformation.GetInternetConnectionProfile();
    var securitySettings = internetProfile?.NetworkSecuritySettings;

    if (securitySettings == null)
    {
        // App-specific: no security data available. Disable sensitive operations or defer network activity.
        return;
    }

    // Evaluate security strength for application policy decisions
    bool isSecureConnection = IsConnectionSecure(securitySettings);
    bool allowSensitiveData = ShouldAllowSensitiveData(securitySettings);

    if (isSecureConnection && allowSensitiveData)
    {
        // App-specific: enable full feature set, including background sync and sensitive workflows.
    }
    else if (isSecureConnection)
    {
        // App-specific: allow core connectivity features but gate sensitive data behind explicit consent.
    }
    else
    {
        // App-specific: switch to a minimal offline-capable experience and prompt the user to find a secure network.
    }

    // Monitor for security changes
    if (!_listeningForChanges)
    {
        NetworkInformation.NetworkStatusChanged += OnNetworkSecurityChanged;
        _listeningForChanges = true;
    }
}

private bool IsConnectionSecure(NetworkSecuritySettings security)
{
    // Check for strong authentication methods
    var authType = security.NetworkAuthenticationType;
    return authType == NetworkAuthenticationType.Wpa3Sae ||
           authType == NetworkAuthenticationType.RsnaPsk ||
           authType == NetworkAuthenticationType.Rsna;
}

private bool ShouldAllowSensitiveData(NetworkSecuritySettings security)
{
    // Require strong encryption for sensitive operations
    var encryptionType = security.NetworkEncryptionType;
    return encryptionType == NetworkEncryptionType.Gcmp256 ||
           encryptionType == NetworkEncryptionType.Gcmp ||
           encryptionType == NetworkEncryptionType.Ccmp;
}

private void OnNetworkSecurityChanged(object sender)
{
    // Re-evaluate security policy when network changes
    EvaluateNetworkSecurityPolicy();
}

Remarks

Retrieval

Access via ConnectionProfile.NetworkSecuritySettings.

Properties

• NetworkAuthenticationType: Link-layer / Wi-Fi authentication (Open, WPA2, WPA3, enterprise, etc.).
• NetworkEncryptionType: Data encryption algorithm (None, WEP, TKIP, CCMP, GCMP variants, etc.).

Interpretation

Wireless vs wired

Policy & compliance usage

• Enforce minimum bar (e.g., block WEP/TKIP for sensitive operations).
• Offer degraded feature set or require user consent when encountering legacy or open networks.
• Log anonymous metrics on encountered auth/encryption types to guide enterprise policy improvements.

Best practices

• Cache briefly; re-query after network status changes (roam, reconnect).
• Combine with cost and domain authentication (for example, ConnectionProfile.GetConnectionCost, IsDomainAuthenticatedBy) for holistic trust decisions.
• Avoid hard-coding specific enum values for future extensibility. Handle unknown types conservatively.

Common pitfalls

See also

• ConnectionProfile
• NetworkAuthenticationType
• NetworkEncryptionType