Detections
Analytics

1.98 (L1) Ensure 'Enable network prediction' is set to 'Enabled: Don't predict network actions on any network connection'

Information

This policy setting controls the network prediction feature which controls DNS prefetching, TCP and SSL pre-connection and pre-rendering of web pages.

The recommended state for this setting is: Enabled: Don't predict network actions on any network connection.

Opening connections to resources that may not be used could increase attack surface and, in some cases, lead to opening connections to resources which the user did not intend to utilize.

Solution

To establish the recommended configuration via configuration profiles, set the following Settings Catalog path to Enabled: Don't predict network actions on any network connection :

Microsoft Edge\Enable network prediction

Impact:

None - this is the default behavior, apart from users being able to change the default.

See Also

https://workbench.cisecurity.org/benchmarks/24642

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b.

Plugin: Windows

Control ID: 471758b4b1a37660d02ecf98dcd175737b345c885e3c7a5bb222639212055b95