EDGE-00-000004 - The list of domains for which Microsoft Defender SmartScreen will not trigger warnings must be allowlisted if used.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Configure the list of Microsoft Defender SmartScreen trusted domains. This means Microsoft Defender SmartScreen will not check for potentially malicious resources, such as phishing software and other malware, if the source URLs match these domains. The Microsoft Defender SmartScreen download protection service will not check downloads hosted on these domains.

If this policy is enabled, Microsoft Defender SmartScreen trusts these domains. If the policy is disabled or not set, default Microsoft Defender SmartScreen protection is applied to all resources.

Solution

The policy value for 'Computer Configuration/Administrative Templates/Microsoft Edge/SmartScreen settings/Configure the list of domains for which Microsoft Defender SmartScreen will not trigger warnings' may be set to 'allow' for allowlisted domains.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Edge_V1R6_STIG.zip

Item Details

References: CAT|III, CCI|CCI-000870, Rule-ID|SV-235722r863224_rule, STIG-ID|EDGE-00-000004, Vuln-ID|V-235722

Plugin: Windows

Control ID: 33bb5cd75876c94306bcdf6fb28af3beb9eefd144d290d67c66f100652097e02