DISA_STIG_Mozilla_Firefox_v6r3_Windows.audit from DISA Mozilla Firefox v6r3 STIG

FFOX-00-000001 - The installed version of Firefox must be supported.

CAT|I

CCI|CCI-002605

Rule-ID|SV-251545r807107_rule

STIG-ID|FFOX-00-000001

Vuln-ID|V-251545

FFOX-00-000002 - Firefox must be configured to allow only TLS 1.2 or above.

CCI|CCI-001453

Rule-ID|SV-251546r820745_rule

STIG-ID|FFOX-00-000002

Vuln-ID|V-251546

FFOX-00-000003 - Firefox must be configured to ask which certificate to present to a website when a certificate is required.

CAT|II

CCI|CCI-000187

Rule-ID|SV-251547r807113_rule

STIG-ID|FFOX-00-000003

Vuln-ID|V-251547

FFOX-00-000004 - Firefox must be configured to not automatically check for updated versions of installed search plugins.

CCI|CCI-000381

Rule-ID|SV-251548r807116_rule

STIG-ID|FFOX-00-000004

Vuln-ID|V-251548

FFOX-00-000005 - Firefox must be configured to not automatically update installed add-ons and plugins.

Rule-ID|SV-251549r807119_rule

STIG-ID|FFOX-00-000005

Vuln-ID|V-251549

FFOX-00-000006 - Firefox must be configured to not automatically execute or download MIME types that are not authorized for auto-download.

CCI|CCI-001242

Rule-ID|SV-251550r832305_rule

STIG-ID|FFOX-00-000006

Vuln-ID|V-251550

FFOX-00-000007 - Firefox must be configured to disable form fill assistance.

Rule-ID|SV-251551r807125_rule

STIG-ID|FFOX-00-000007

Vuln-ID|V-251551

FFOX-00-000008 - Firefox must be configured to not use a password store with or without a master password.

Rule-ID|SV-251552r822411_rule

STIG-ID|FFOX-00-000008

Vuln-ID|V-251552

FFOX-00-000009 - Firefox must be configured to block pop-up windows - Allowed Sites

Rule-ID|SV-251553r820750_rule

STIG-ID|FFOX-00-000009

Vuln-ID|V-251553

FFOX-00-000009 - Firefox must be configured to block pop-up windows - Default

FFOX-00-000009 - Firefox must be configured to block pop-up windows - Locked

FFOX-00-000010 - Firefox must be configured to prevent JavaScript from moving or resizing windows.

Rule-ID|SV-251554r807134_rule

STIG-ID|FFOX-00-000010

Vuln-ID|V-251554

FFOX-00-000011 - Firefox must be configured to prevent JavaScript from raising or lowering windows.

Rule-ID|SV-251555r807137_rule

STIG-ID|FFOX-00-000011

Vuln-ID|V-251555

FFOX-00-000013 - Firefox must be configured to disable the installation of extensions.

Rule-ID|SV-251557r820752_rule

STIG-ID|FFOX-00-000013

Vuln-ID|V-251557

FFOX-00-000014 - Background submission of information to Mozilla must be disabled.

Rule-ID|SV-251558r807146_rule

STIG-ID|FFOX-00-000014

Vuln-ID|V-251558

FFOX-00-000015 - Firefox development tools must be disabled.

CAT|III

CCI|CCI-001312

Rule-ID|SV-251559r807149_rule

STIG-ID|FFOX-00-000015

Vuln-ID|V-251559

FFOX-00-000016 - Firefox must have the DoD root certificates installed.

CCI|CCI-000185

Rule-ID|SV-251560r820754_rule

STIG-ID|FFOX-00-000016

Vuln-ID|V-251560

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Cache

Rule-ID|SV-252881r820757_rule

STIG-ID|FFOX-00-000017

Vuln-ID|V-252881

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Cookies

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Downloads

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - FormData

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - History

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - OfflineApps

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - Sessions

FFOX-00-000017 - Firefox must be configured to not delete data upon shutdown - SiteSettings

FFOX-00-000018 - Firefox must prevent the user from quickly deleting data.

CCI|CCI-002355

Rule-ID|SV-251562r807158_rule

STIG-ID|FFOX-00-000018

Vuln-ID|V-251562

FFOX-00-000019 - Firefox private browsing must be disabled.

Rule-ID|SV-251563r807161_rule

STIG-ID|FFOX-00-000019

Vuln-ID|V-251563

FFOX-00-000020 - Firefox search suggestions must be disabled.

Rule-ID|SV-251564r807164_rule

STIG-ID|FFOX-00-000020

Vuln-ID|V-251564

FFOX-00-000021 - Firefox autoplay must be disabled.

Rule-ID|SV-251565r832307_rule

STIG-ID|FFOX-00-000021

Vuln-ID|V-251565

FFOX-00-000022 - Firefox network prediction must be disabled.

Rule-ID|SV-251566r807170_rule

STIG-ID|FFOX-00-000022

Vuln-ID|V-251566

FFOX-00-000023 - Firefox fingerprinting protection must be enabled.

Rule-ID|SV-251567r807173_rule

STIG-ID|FFOX-00-000023

Vuln-ID|V-251567

FFOX-00-000024 - Firefox cryptomining protection must be enabled.

Rule-ID|SV-251568r807176_rule

STIG-ID|FFOX-00-000024

Vuln-ID|V-251568

FFOX-00-000025 - Firefox Enhanced Tracking Protection must be enabled.

Rule-ID|SV-251569r807179_rule

STIG-ID|FFOX-00-000025

Vuln-ID|V-251569

FFOX-00-000026 - Firefox extension recommendations must be disabled.

Rule-ID|SV-251570r820759_rule

STIG-ID|FFOX-00-000026

Vuln-ID|V-251570

FFOX-00-000027 - Firefox deprecated ciphers must be disabled.

Rule-ID|SV-251571r820762_rule

STIG-ID|FFOX-00-000027

Vuln-ID|V-251571

FFOX-00-000028 - Firefox must not recommend extensions as the user is using the browser.

Rule-ID|SV-251572r807188_rule

STIG-ID|FFOX-00-000028

Vuln-ID|V-251572

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Highlights

Rule-ID|SV-251573r822781_rule

STIG-ID|FFOX-00-000029

Vuln-ID|V-251573

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Locked

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Pocket

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Search

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - Snippets

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - SponsoredPocket

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - SponsoredTopSites

FFOX-00-000029 - The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets - TopSites

FFOX-00-000033 - Firefox must be configured so that DNS over HTTPS is disabled.

Rule-ID|SV-251577r807203_rule

STIG-ID|FFOX-00-000033

Vuln-ID|V-251577

FFOX-00-000034 - Firefox accounts must be disabled.

Rule-ID|SV-251578r807206_rule

STIG-ID|FFOX-00-000034

Vuln-ID|V-251578

FFOX-00-000036 - Firefox feedback reporting must be disabled.

Rule-ID|SV-251580r809561_rule

STIG-ID|FFOX-00-000036

Vuln-ID|V-251580

FFOX-00-000037 - Firefox encrypted media extensions must be disabled - Enabled

Rule-ID|SV-251581r807215_rule

STIG-ID|FFOX-00-000037

Vuln-ID|V-251581

FFOX-00-000037 - Firefox encrypted media extensions must be disabled - Locked

FFOX-00-000038 - Pocket must be disabled.

Rule-ID|SV-252908r836395_rule

STIG-ID|FFOX-00-000038

Vuln-ID|V-252908

FFOX-00-000039 - Firefox Studies must be disabled.

DISA STIG Mozilla Firefox Windows v6r3

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous


Revision 1.1 Feb 21, 2023 Miscellaneous Audit deprecated. Metadata updated. References updated.
Revision 1.0 Oct 17, 2022 Miscellaneous Metadata updated.

DISA STIG Mozilla Firefox Windows v6r3 Download File

Warning! Audit Deprecated

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous

Revision 1.0

Miscellaneous

DISA STIG Mozilla Firefox Windows v6r3