Detections
Analytics

1.57 Ensure 'Allow the audio sandbox to run' is set to 'Enabled'

Information

This policy setting controls whether audio processes in Microsoft Edge run in a sandbox.

The recommended state for this setting is: Enabled.

Note: Security software setups within your environment might interfere with the sandbox.

Having audio processes run in a sandbox ensures that if a website misuses audio processes that data may not be manipulated or exfiltrated from the system.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Allow the audio sandbox to run

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

The audio process will not run in the sandbox and the WebRTC audio-processing module will run in the renderer process.

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: SYSTEM AND INFORMATION INTEGRITY

References: 800-53|SI-16, CSCv7|9.2

Plugin: Windows

Control ID: 38fe3026131aab5ce318d9a34e0f76c616a725ed19ab80337ddc900992945fbf