EDGE-00-000009 - The default search provider must be set to use an encrypted connection.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Allows a list of list of up to 10 search engines to be configured, one of which must be marked as the default search engine. The encoding does not need to be specified. Starting in Microsoft Edge 80, the suggest_url and image_search_url parameters are optional. The optional parameter, image_search_post_params (consists of comma-separated name/value pairs), is available starting in Microsoft Edge 80.

Starting in Microsoft Edge 83, search engine discovery can be enabled with the allow_search_engine_discovery optional parameter. This parameter must be the first item in the list. If allow_search_engine_discovery is not specified, search engine discovery will be disabled by default. Starting in Microsoft Edge 84, this policy can be set as a recommended policy to allow search provider discovery. The allow_search_engine_discovery optional parameter does not need to be added.

If this policy is enabled, users cannot add, remove, or change any search engine in the list. Users can set their default search engine to any search engine in the list.

If this policy is disabled or not configured, users can modify the search engines list as desired.

Solution

Configure the policy value for 'Computer Configuration/Administrative Templates/Microsoft Edge/Manage Search Engines'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_Edge_V1R6_STIG.zip

Item Details

References: CAT|II, CCI|CCI-000381, Rule-ID|SV-235726r766840_rule, STIG-ID|EDGE-00-000009, Vuln-ID|V-235726

Plugin: Windows

Control ID: ea55642220302447f0e9a291f72e7071e9cc8cac5b0d08baa470ab6507deff12