AADC-CL-000285 - Adobe Acrobat Pro DC Classic access to websites must be blocked.

Information

PDF files can contain URLs that initiate connections to websites in order to share or get information. Any Internet access introduces a security risk as malicious websites can transfer harmful content or silently gather data.

Solution

Configure the following registry value:

Registry Hive:
HKEY_LOCAL_MACHINE
Registry Path:
\Software\Policies\Adobe\Adobe Acrobat\2015\FeatureLockDown\cDefaultLaunchURLPerms\

Value Name: iURLPerms
Type: REG_DWORD
Value: 1

The setting may be set to '0' if a documented risk acceptance approving the websites is approved by the ISSO/AO.

Configure the policy value for Computer Configuration > Administrative Templates > Adobe Acrobat Pro DC Classic > Preferences > Trust Manager > 'Access to websites' to 'Enabled' and select 'Block PDF files access to all web sites' in the drop down box. Select 'Custom setting' if needed and provide a documented risk acceptance approved by the ISSO/AO approving the websites.

This policy setting requires the installation of the AcrobatProDCClassic custom templates included with the STIG package. 'AcrobatProDCClassic.admx' and 'AcrobatProDCClassic.adml' must be copied to the \Windows\PolicyDefinitions and \Windows\PolicyDefinitions\en-US directories respectively.

Item Details

Audit Name: DISA STIG Adobe Acrobat Pro DC Classic Track v1r3

Category: SYSTEM AND COMMUNICATIONS PROTECTION

Plugin: Windows

Control ID: d2578af87038721dc9277fd292eee3e83b2a5bb55930665e7a20acc472e5d992

Detections

Analytics

AADC-CL-000285 - Adobe Acrobat Pro DC Classic access to websites must be blocked.

Information

Solution

See Also

Item Details