1.2.1 Ensure 'Enable Google Cast' is set to 'Disabled'

CSCv7|9.2

1.3.3 Ensure 'Control use of insecure content exceptions' is set to 'Enabled: Do not allow any site to load mixed content'

CSCv7|7.5

1.3.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'

CSCv7|7.2

1.3.9 Ensure 'Default geolocation setting' is set to 'Enabled: Don't allow any site to track users physical location'

1.5.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'

1.7.1 Ensure 'Allow Basic authentication for HTTP' is set to 'Disabled'

CSCv7|14.4

1.7.2 Ensure 'Allow cross-origin HTTP Basic Auth prompts' is set to 'Disabled'

1.13.1 Ensure 'Enable saving passwords to the password manager' is set to 'Disabled'

1.14.1 Ensure 'Enable startup boost' is set to 'Disabled'

1.17.1 Ensure 'Specifies whether to allow insecure websites to make requests to more-private network endpoints' is set to 'Disabled'

1.20.1 Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled'

CSCv7|8.3

1.20.2 Ensure 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is set to 'Enabled'

1.20.3 Ensure 'Enable Microsoft Defender SmartScreen DNS requests' is set to 'Disabled'

1.20.4 Ensure 'Force Microsoft Defender SmartScreen checks on downloads from trusted sources' is set to 'Enabled'

1.20.5 Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled'

1.20.6 Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'

1.22.1 Ensure 'Configure Edge TyposquattingChecker' is set to 'Enabled'

1.23 Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads'

1.24 Ensure 'Allow download restrictions' is set to 'Enabled: Block potentially dangerous downloads'

1.27 Ensure 'Allow Google Cast to connect to Cast devices on all IP addresses' is set to 'Disabled'

1.28 Ensure 'Allow importing of autofill form data' is set to 'Disabled'

1.29 Ensure 'Allow importing of browser settings' is set to 'Disabled'

1.30 Ensure 'Allow importing of home page settings' is set to 'Disabled'

1.31 Ensure 'Allow importing of payment info' is set to 'Disabled'

1.32 Ensure 'Allow importing of saved passwords' is set to 'Disabled'

1.33 Ensure 'Allow importing of search engine settings' is set to 'Disabled'

1.34 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'

1.38 Ensure 'Allow personalization of ads search and news by sending browsing history to Microsoft' is set to 'Disabled'

1.39 Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled'

CSCv7|6.1

1.40 Ensure 'Allow remote debugging' is set to 'Disabled'

1.42 Ensure 'Allow the audio sandbox to run' is set to 'Enabled'

1.44 Ensure 'Allow user feedback' is set to 'Disabled'

1.48 Ensure 'Allow websites to query for available payment methods' is set to 'Disabled'

1.50 Ensure 'Automatically import another browser's data and settings at first run' is set to 'Enabled: Disables automatic import, and the import section of the first-run experience is skipped'

1.52 Ensure 'Block tracking of users' web-browsing activity' is set to 'Enabled: Balanced (Blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)'

1.54 Ensure 'Clear browsing data when Microsoft Edge closes' is set to 'Disabled'

1.55 Ensure 'Clear cached images and files when Microsoft Edge closes' is set to 'Disabled'

1.56 Ensure 'Configure InPrivate mode availability' is set to 'Enabled: InPrivate mode disabled'

1.60 Ensure 'Configure the list of names that will bypass the HSTS policy check' is set to 'Disabled'

1.61 Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled'

1.62 Ensure 'Configure the Share experience' is set to 'Enabled: Don't allow using the Share experience'

1.63 Ensure 'Configure whether form data and HTTP headers will be sent when entering or exiting Internet Explorer mode' is set to 'Enabled: Do not send form data or headers'

1.64 Ensure 'Continue running background apps after Microsoft Edge closes' is set to 'Disabled'

1.65 Ensure 'Control communication with the Experimentation and Configuration Service' is set to 'Enabled: Disable communication with the Experimentation and Configuration Service'

CSCv7|2.7

1.70 Ensure 'Delete old browser data on migration' is set to 'Disabled'

1.71 Ensure 'Disable saving browser history' is set to 'Disabled'

1.72 Ensure 'Disable synchronization of data using Microsoft sync services' is set to 'Enabled'

1.73 Ensure 'DNS interception checks enabled' is set to 'Enabled'

CSCv7|7.7

1.74 Ensure 'Enable AutoFill for addresses' is set to 'Disabled'

1.75 Ensure 'Enable AutoFill for payment instructions' is set to 'Disabled'

1.76 Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'

1.77 Ensure 'Enable component updates in Microsoft Edge' is set to 'Enabled'

CSCv7|3.5

1.78 Ensure 'Enable deleting browser and download history' is set to 'Disabled'

1.79 Ensure 'Enable Follow service in Microsoft Edge' is set to 'Disabled'

1.80 Ensure 'Enable globally scoped HTTP auth cache' is set to 'Disabled'

1.82 Ensure 'Enable network prediction' is set to 'Enabled: Don't predict network actions on any network connection'

1.83 Ensure 'Enable profile creation from the Identity flyout menu or the Settings page' is set to 'Disabled'

CSCv7|16.6

1.84 Ensure 'Enable renderer code integrity' is set to 'Enabled'

CSCv7|7.3

1.85 Ensure 'Enable resolution of navigation errors using a web service' is set to 'Disabled'

1.87 Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'

1.88 Ensure 'Enable site isolation for every site' is set to 'Enabled'

1.90 Ensure 'Enable travel assistance' is set to 'Disabled'

1.91 Ensure 'Enable use of ephemeral profiles' is set to 'Disabled'

1.92 Ensure 'Enable warnings for insecure forms' is set to 'Enabled'

1.95 Ensure 'Enhance the security state in Microsoft Edge' is set to 'Enabled: Balanced mode'

1.96 Ensure 'Hide the First-run experience and splash screen' is set to 'Enabled'

1.97 Ensure 'In-app support Enabled' is set to 'Disabled'

1.99 Ensure 'Manage exposure of local IP addresses by WebRTC' is set to 'Disabled'

1.100 Ensure 'Notify a user that a browser restart is recommended or required for pending updates' is set to 'Enabled: Required - Show a recurring prompt to the user indicating that a restart is required'

1.101 Ensure 'Restrict exposure of local IP address by WebRTC' is set to 'Enabled: Allow public interface over http default route. This doesn't expose the local IP address'

1.102 Ensure 'Set disk cache size, in bytes' is set to 'Enabled: 250609664'

1.103 Ensure 'Set the time period for update notifications' is set to 'Enabled: 86400000'

1.107 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'

CSCv7|7.1

1.108 Ensure 'Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context' is set to 'Disabled'

1.110 Ensure 'Suggest similar pages when a webpage can't be found' is set to 'Disabled'

1.111 Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'

CSCv7|2.2

3.1.1 Ensure 'Update policy override default' is set to 'Enabled: Always allow updates (recommended)'

CIS_Microsoft_Edge_v1.1.0_L1.audit from CIS Microsoft Edge Benchmark

Detections

Analytics

CIS Microsoft Edge L1 v1.1.0

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.5

Miscellaneous

Revision 1.4

Miscellaneous

Revision 1.3

Miscellaneous

Revision 1.2

Functional Update

Revision 1.1

Miscellaneous