CIS IE 9 v1.0.0

Audit Details

Name: CIS IE 9 v1.0.0

Updated: 4/25/2022

Authority: CIS

Plugin: Windows

Revision: 1.25

Estimated Item Count: 119

File Details

Filename: CIS_IE9_v1.0.0.audit

Size: 247 kB

MD5: 37f2790b0505f87eb5429740c3b0cbdb
SHA256: 05d27c724f7ff1601a99d18c1b45588d7ae9377c00438c2b1628edbd4d954e54

Audit Items

DescriptionCategories
1.1 Set 'Allow software to run or install even if the signature is invalid' to 'Disabled'
1.2 Set 'Prevent Bypassing SmartScreen Filter Warnings' to 'Enabled'

SYSTEM AND INFORMATION INTEGRITY

1.3 Enable 'Prevent users from bypassing SmartScreen Filter's application reputation warnings about files that are not commonly downloaded'
1.4 Configure 'Do not allow users to enable or disable add- ons'
1.5 Set 'Disable Save this program to disk option' to 'Enabled'
1.6 Set 'Select SmartScreen Filter mode for Internet Explorer 9' to 'Enabled:On'

SYSTEM AND COMMUNICATIONS PROTECTION

2.1 Set 'Disable Per- User Installation of ActiveX Controls' to 'Enabled'

SYSTEM AND COMMUNICATIONS PROTECTION

2.2 Set 'Only use the ActiveX Installer Service for installation of ActiveX Controls' to 'Enabled'

CONFIGURATION MANAGEMENT

2.3 Set 'Turn off ActiveX opt- in prompt' to 'Disabled'

CONFIGURATION MANAGEMENT

2.4 Set 'Turn on ActiveX Filtering' to 'Enabled'

SYSTEM AND COMMUNICATIONS PROTECTION

3.1 Configure 'Prevent Deleting Cookies'
3.2 Configure 'Prevent Deleting Temporary Internet Files'
3.3 Configure 'Turn off 'Delete Browsing History' functionality'
4.1 Configure 'Automatically check for Internet Explorer updates'
5.1 Set 'Secure Protocol combinations' to 'Enabled:Only use TLS 1.0'

SYSTEM AND COMMUNICATIONS PROTECTION

5.2 Set 'Check for server certificate revocation' to 'Enabled'
5.3 Set 'Prevent ignoring certificate errors' to 'Enabled'
5.4 Set 'Disable changing certificate settings' to 'Enabled'
5.5 Set 'Check for signatures on downloaded programs' to 'Enabled'
6.1 Set 'Disable Browser Geolocation' to 'Enabled'
7.1 Set 'Restrict File Download' to 'Enabled' - explorer.exe

CONFIGURATION MANAGEMENT

7.1 Set 'Restrict File Download' to 'Enabled' - iexplore.exe

CONFIGURATION MANAGEMENT

7.1 Set 'Restrict File Download' to 'Enabled' - reserved

CONFIGURATION MANAGEMENT

7.2 Set 'Notification bar' to 'Enabled' -(Reserved)

CONFIGURATION MANAGEMENT

7.2 Set 'Notification bar' to 'Enabled' -explorer.exe

CONFIGURATION MANAGEMENT

7.2 Set 'Notification bar' to 'Enabled' -iexplore.exe

CONFIGURATION MANAGEMENT

7.3 Set 'Restrict ActiveX Install' to 'Enabled' - (Reserved)

SYSTEM AND COMMUNICATIONS PROTECTION

7.3 Set 'Restrict ActiveX Install' to 'Enabled' - explorer.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.3 Set 'Restrict ActiveX Install' to 'Enabled'-iexplore.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.4 Set 'Consistent Mime Handling' to 'Enabled' - (Reserved)

SYSTEM AND COMMUNICATIONS PROTECTION

7.4 Set 'Consistent Mime Handling' to 'Enabled' - explorer.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.4 Set 'Consistent Mime Handling' to 'Enabled' - iexplore.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.5 Set 'Protection From Zone Elevation' to 'Enabled' - (Reserved)

SYSTEM AND COMMUNICATIONS PROTECTION

7.5 Set 'Protection From Zone Elevation' to 'Enabled' - explorer.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.5 Set 'Protection From Zone Elevation' to 'Enabled' - iexplore.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.6 Set 'Scripted Window Security Restrictions' to 'Enabled' - (Reserved)

CONFIGURATION MANAGEMENT

7.6 Set 'Scripted Window Security Restrictions' to 'Enabled' - explorer.exe

CONFIGURATION MANAGEMENT

7.6 Set 'Scripted Window Security Restrictions' to 'Enabled' - iexplore.exe

CONFIGURATION MANAGEMENT

7.7 Set 'Mime Sniffing Safety Feature' to 'Enabled' - (Reserved)

SYSTEM AND COMMUNICATIONS PROTECTION

7.7 Set 'Mime Sniffing Safety Feature' to 'Enabled' - explorer.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.7 Set 'Mime Sniffing Safety Feature' to 'Enabled' - iexplore.exe

SYSTEM AND COMMUNICATIONS PROTECTION

7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - (Reserved)

CONFIGURATION MANAGEMENT

7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - explorer.exe

CONFIGURATION MANAGEMENT

7.8 Set 'MK Protocol Security Restriction' to 'Enabled' - iexplore.exe

CONFIGURATION MANAGEMENT

8.1.1 Set 'Access data sources across domains' to 'Enabled:Disable'

SYSTEM AND COMMUNICATIONS PROTECTION

8.1.2 Set 'Allow drag and drop or copy and paste files' to 'Enabled:Disable'

CONFIGURATION MANAGEMENT

8.1.3 Set 'Allow font downloads' to 'Enabled:Disable'

SYSTEM AND COMMUNICATIONS PROTECTION

8.1.4 Set 'Allow installation of desktop items' to 'Enabled:Disable'

CONFIGURATION MANAGEMENT

8.1.5 Set 'Allow paste operations via script' to 'Enabled:Disable'

CONFIGURATION MANAGEMENT

8.1.6 Set 'Allow script- initiated windows without size or position constraints' to 'Enabled:Disable'

CONFIGURATION MANAGEMENT