Detections
Analytics

1.131 (L1) Ensure 'Suggest similar pages when a webpage can't be found' is set to 'Disabled'

Information

This policy setting controls whether Microsoft Edge may connect to a web service to generate URLs and search suggestions for website connectivity issues. If disabled standard errors will be issued, if enabled errors will be customized with URL suggestions.

The recommended state for this setting is: Disabled.

This setting could potentially lead to a leak of information regarding the types of websites being visited, it may also open users up to redirection to a malicious site in the event that the service generating information becomes compromised.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Disabled :

Microsoft Edge\Suggest similar pages when a webpage can't be found

Impact:

Users will still be presented with an error if a website cannot be reached however, the message may be more generic than the user would get in the instance of this service being enabled.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6, 800-53|CM-7, CSCv7|9.2

Plugin: Windows

Control ID: 36332d94a46f007ed0936a9aec83f9eb0eb0bd8bbb29e6ec36e22797046c7411