1.2.1 Ensure 'Enable Google Cast' is set to 'Disabled'

800-53|CM-6

800-53|CM-7

CSCv7|9.2

1.3.1 Ensure 'Allow users to manage installed CA certificates' is set to 'Enabled: Disallow users from managing certificates'

800-53|AC-6

1.4.3 Ensure 'Control use of insecure content exceptions' is set to 'Enabled: Do not allow any site to load mixed content'

800-53|AC-17(2)

800-53|IA-5

800-53|IA-5(1)

800-53|SC-8

800-53|SC-8(1)

CSCv7|7.5

1.4.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'

CSCv7|7.2

1.4.9 Ensure 'Default automatic downloads setting' is set to 'Enabled: Prevent all websites from performing multiple downloads, even after a user gesture'

800-53|SI-2c.

1.4.10 Ensure 'Default geolocation setting' is set to 'Enabled: Don't allow any site to track users' physical location'

1.7.1 Ensure 'Enable insecure download warnings' is set to 'Enabled'

800-53|SI-4

1.8.1 Ensure 'Configure Edge Website Typo Protection' is set to 'Enabled'

800-53|SI-16

CSCv7|8.3

1.10.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'

1.11.1 Ensure 'Blocks external extensions from being installed' is set to 'Enabled'

800-53|CM-10

800-53|CM-11

800-53|SC-18

1.14.1 Ensure 'Allow Basic authentication for HTTP' is set to 'Disabled'

CSCv7|14.4

1.14.2 Ensure 'Allow cross-origin HTTP Authentication prompts' is set to 'Disabled'

1.15.1 Ensure 'Enable sign-in to Microsoft Edge using non-Microsoft accounts' is set to 'Disabled'

800-53|AC-2(1)

800-53|AC-3

1.15.2 Ensure 'Guided Switch Enabled' is set to 'Disabled'

1.22.1 Ensure 'Enable saving passkeys to the password manager' is set to 'Disabled'

1.22.2 Ensure 'Enable saving passwords to the password manager' is set to 'Disabled'

1.24.1 Ensure 'Enable startup boost' is set to 'Disabled'

1.32.1 Ensure 'Configure Microsoft Edge Scareware blocker protection' is set to 'Enabled'

1.32.2 Ensure 'Configure Microsoft Edge scareware blocker to block sites detected as potential tech scams' is set to 'Enabled'

1.34.1 Ensure 'Configure Microsoft Defender SmartScreen' is set to 'Enabled'

1.34.2 Ensure 'Configure Microsoft Defender SmartScreen to block potentially unwanted apps' is set to 'Enabled'

1.34.3 Ensure 'Enable Microsoft Defender SmartScreen DNS requests' is set to 'Enabled'

800-53|SI-8

CSCv7|7.7

1.34.4 Ensure 'Force Microsoft Defender SmartScreen checks on downloads from trusted sources' is set to 'Enabled'

1.34.5 Ensure 'Prevent bypassing Microsoft Defender SmartScreen prompts for sites' is set to 'Enabled'

1.34.6 Ensure 'Prevent bypassing of Microsoft Defender SmartScreen warnings about downloads' is set to 'Enabled'

1.35.1 Ensure 'Disable Bing chat entry-points on Microsoft Edge Enterprise new tab page' is set to 'Disabled'

1.37 Ensure 'Ads setting for sites with intrusive ads' is set to 'Enabled: Block ads on sites with intrusive ads. (Default Value)'

1.38 Ensure 'Allow download restrictions' is set to 'Enabled:  Block malicious downloads'

1.41 Ensure 'Allow Google Cast to connect to Cast devices on all IP addresses' is set to 'Disabled'

1.42 Ensure 'Allow import of data from other browsers on each Microsoft Edge launch' is set to 'Disabled'

1.43 Ensure 'Allow importing of autofill form data' is set to 'Disabled'

1.44 Ensure 'Allow importing of browser settings' is set to 'Disabled'

1.45 Ensure 'Allow importing of home page settings' is set to 'Disabled'

1.46 Ensure 'Allow importing of payment info' is set to 'Disabled'

1.47 Ensure 'Allow importing of saved passwords' is set to 'Disabled'

1.48 Ensure 'Allow importing of search engine settings' is set to 'Disabled'

1.49 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'

1.53 Ensure 'Allow personalization of ads, Microsoft Edge, search, news and other Microsoft services by sending browsing history, favorites and collections, usage and other browsing data to Microsoft' is set to 'Disabled'

1.54 Ensure 'Allow queries to a Browser Network Time service' is set to 'Enabled'

800-53|AU-7

800-53|AU-8

CSCv7|6.1

1.55 Ensure 'Allow remote debugging' is set to 'Disabled'

1.56 Ensure 'Allow socket pool size randomization for proxies' is set to 'Enabled'

1.57 Ensure 'Allow the audio sandbox to run' is set to 'Enabled'

1.59 Ensure 'Allow user feedback' is set to 'Disabled'

1.63 Ensure 'Allow Web Authentication requests on sites with broken TLS certificates' is set to 'Disabled'

1.64 Ensure 'Allow websites to query for available payment methods' is set to 'Disabled'

1.66 Ensure 'Automatically import another browser's data and settings at first run' is set to 'Enabled: Disables automatic import, and the import section of the first-run experience is skipped'

1.67 Ensure 'Automatically open downloaded MHT or MHTML files from the web in Internet Explorer mode' is set to 'Disabled'

1.69 Ensure 'Block tracking of users' web-browsing activity' is set to 'Enabled: Balanced (Blocks harmful trackers and trackers from sites user has not visited; content and ads will be less personalized)' or higher

1.71 Ensure 'Clear browsing data when Microsoft Edge closes' is set to 'Disabled'

800-53|CM-6b.

1.72 Ensure 'Clear cached images and files when Microsoft Edge closes' is set to 'Disabled'

1.73 Ensure 'Clear history for IE and IE mode every time you exit' is set to 'Disabled'

800-53|CM-7b.

1.74 Ensure 'Configure browser process code integrity guard setting' is set to 'Enabled: Enable code integrity guard enforcement in the browser process.'

1.75 Ensure 'Configure InPrivate mode availability' is set to 'Enabled: InPrivate mode disabled'

1.78 Ensure 'Configure the list of names that will bypass the HSTS policy check' is set to 'Disabled'

1.79 Ensure 'Configure the list of types that are excluded from synchronization' is set to 'Enabled'

1.80 Ensure 'Configure the Share experience' is set to 'Enabled: Don't allow using the Share experience'

1.81 Ensure 'Continue running background apps after Microsoft Edge closes' is set to 'Disabled'

1.82 Ensure 'Control communication with the Experimentation and Configuration Service' is set to 'Enabled: Disable communication with the Experimentation and Configuration Service'

1.85 Ensure 'Control where security restrictions on insecure origins apply' is set to 'Disabled'

1.88 Ensure 'Delete old browser data on migration' is set to 'Disabled'

1.89 Ensure 'Disable saving browser history' is set to 'Disabled'

1.90 Ensure 'Disable synchronization of data using Microsoft sync services' is set to 'Enabled'

1.91 Ensure 'DNS interception checks enabled' is set to 'Enabled'

1.92 Ensure 'Dynamic Code Settings' is set to 'Enabled: Prevent the browser process from creating dynamic code'

1.93 Ensure 'Edge 3P SERP Telemetry Enabled' is set to 'Disabled'

1.94 Ensure 'Enable Application Bound Encryption' is set to 'Enabled'

1.95 Ensure 'Enable AutoFill for addresses' is set to 'Disabled'

1.96 Ensure 'Enable AutoFill for payment instruments' is set to 'Disabled'

1.97 Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'

1.98 Ensure 'Enable clipboard suggestions in the address bar' is set to 'Disabled'

1.99 Ensure 'Enable component updates in Microsoft Edge' is set to 'Enabled'

800-53|RA-5

800-53|SI-2

800-53|SI-2(2)

CSCv7|3.5

1.101 Ensure 'Enable deleting browser and download history' is set to 'Disabled'

1.103 Ensure 'Enable globally scoped HTTP auth cache' is set to 'Disabled'

1.105 Ensure 'Enable network prediction' is set to 'Enabled: Don't predict network actions on any network connection'

1.107 Ensure 'Enable profile creation from the Identity flyout menu or the Settings page' is set to 'Disabled'

800-53|AC-2

CSCv7|16.6

1.109 Ensure 'Enable resolution of navigation errors using a web service' is set to 'Disabled'

1.111 Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'

1.113 Ensure 'Enable site isolation for every site' is set to 'Enabled'

1.114 Ensure 'Enable strict MIME type checking for worker scripts' is set to 'Enabled'

1.115 Ensure 'Enable tab organization suggestions' is set to 'Disabled'

1.116 Ensure 'Enable the Copilot new tab page' is set to 'Disabled'

1.117 Ensure 'Enable the Search bar' is set to 'Disabled'

1.119 Ensure 'Enable upload files from mobile in Microsoft Edge desktop' is set to 'Disabled'

1.120 Ensure 'Enable use of ephemeral profiles' is set to 'Disabled'

1.122 Ensure 'Enable warnings for insecure forms' is set to 'Enabled'

1.123 Ensure 'Enables DALL-E themes generation' is set to 'Disabled'

1.126 Ensure 'Enhance the security state in Microsoft Edge' is set to 'Enabled: Balanced mode' or higher

1.128 Ensure 'Hide the First-run experience and splash screen' is set to 'Enabled'

1.129 Ensure 'In-app support Enabled' is set to 'Disabled'

1.131 Ensure 'Manage exposure of local IP addressess by WebRTC' is set to 'Disabled'

1.132 Ensure 'Notify a user that a browser restart is recommended or required for pending updates' is set to 'Enabled: Required - Show a recurring prompt to the user indicating that a restart is required'

1.133 Ensure 'Set disk cache size, in bytes' is set to 'Enabled: 250609664'

800-53|AU-4

CSCv7|6.4

1.134 Ensure 'Set the time period for update notifications' is set to 'Enabled: 86400000'

1.135 Ensure 'Shopping in Microsoft Edge Enabled' is set to 'Disabled'

1.137 Ensure 'Show Microsoft Rewards experiences' is set to 'Disabled'

1.138 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'

CSCv7|7.1

1.139 Ensure 'Specifies whether SharedArrayBuffers can be used in a non cross-origin-isolated context' is set to 'Disabled'

1.142 Ensure 'Standalone Sidebar Enabled' is set to 'Disabled'

1.143 Ensure 'Suggest similar pages when a webpage can't be found' is set to 'Disabled'

1.144 Ensure 'Suppress the unsupported OS warning' is set to 'Disabled'

Detections

Analytics

CIS Microsoft Edge v5.0.0 L1

Audit Details

File Details

Audit Changelog

No revisions found