Detections
Analytics

1.95 O365-OU-000027

Information

Outlook must be configured to not allow hyperlinks in suspected phishing messages.

GROUP ID: V-223372
RULE ID: SV-223372r961863

This policy setting controls whether hyperlinks in suspected phishing e-mail messages in Outlook are allowed. If you enable this policy setting, Outlook will allow hyperlinks in suspected phishing messages that are not also classified as junk e-mail. If you disable or do not configure this policy setting, Outlook will not allow hyperlinks in suspected phishing messages, even if they are not classified as junk e-mail.

Solution

Set the policy value for

User Configuration >> Administrative Templates >> Microsoft Outlook 2016 >> Security >> Trust Center 'Allow hyperlinks in suspected phishing e-mail messages'

to 'Disabled'.

See Also

https://workbench.cisecurity.org/benchmarks/26066

Item Details

Category: CONFIGURATION MANAGEMENT

References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-223372r961863_rule, STIG-ID|O365-OU-000027, Vuln-ID|V-223372

Plugin: Windows

Control ID: a4103025e25f514dc65be1f61b225919b0397ac20acddc04625666d06eb15ce0