Detections
Analytics

1.32.2 Ensure 'Configure Microsoft Edge scareware blocker to block sites detected as potential tech scams' is set to 'Enabled'

Information

This policy setting controls whether Microsoft Edge blocks sites that are detected as potential tech scams.

The recommended state for this setting is: Enabled.

Note: If the ScarewareBlockerProtectionEnabled policy is disabled, this policy has no effect.

Without active blocking of detected scareware sites, Scareware blocker can detect potential tech scams but cannot prevent users from interacting with them. Enabling this policy ensures that detected scareware sites are blocked, providing the enforcement action needed to protect users from credential theft, unauthorized remote access, or financial loss resulting from tech support scams.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Scareware Blocker settings\Configure Microsoft Edge scareware blocker to block sites detected as potential tech scams

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft.

Impact:

Sites detected as potential tech scams by the Scareware blocker are blocked. Legitimate sites incorrectly identified as scareware can be excluded using the ScarewareBlockerAllowListDomains policy.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16, CSCv7|8.3

Plugin: Windows

Control ID: 042a8454cf21de683859bfd850c06bdc660114baaf7b7aedc7155b32f0601ffd