Detections
Analytics

1.68 Ensure 'Block third party cookies' is set to 'Enabled'

Information

This policy controls whether web page elements from a domain other than that in the address bar can set cookies.

The recommended state for this setting is: Enabled.

Allowing third-party cookies could potentially allow tracking of your web activities by third-party entities which may expose information that could be used for an attack on the end-user.

Solution

To establish the recommended configuration via GP, set the following UI path to Enabled :

Computer Configuration\Policies\Administrative Templates\Microsoft Edge\Block third party cookies

Note: This Group Policy path may not exist by default. It is provided by the Group Policy template MSEdge.admx/adml that can be downloaded from: Download Microsoft Edge for Business - Microsoft https://www.microsoft.com/en-us/edge/business/download.

Impact:

Disabling third-party cookies could cause some websites to not function as expected (e.g., Microsoft 365 or Salesforce).

See Also

https://workbench.cisecurity.org/benchmarks/28120

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|7.2

Plugin: Windows

Control ID: 159a47d1cbc565a4b8566cf5b26cdbb12a11b5cea6d0daea45d0ca3b05125942