Detections
Analytics

DTBI092-IE11 - Anti-Malware programs against ActiveX controls must be run for the Trusted Sites zone.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

This policy setting determines whether Internet Explorer runs Anti-Malware programs against ActiveX controls, to check if they're safe to load on pages. If you enable this policy setting, Internet Explorer won't check with your Anti-Malware program to see if it's safe to create an instance of the ActiveX control. If you disable this policy setting, Internet Explorer always checks with your Anti-Malware program to see if it's safe to create an instance of the ActiveX control. If you don't configure this policy setting, Internet Explorer won't check with your Anti-Malware program to see if it's safe to create an instance of the ActiveX control. Users can turn this behavior on or off, using Internet Explorer Security settings.

Solution

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer-> Internet Control Panel -> Security Page -> Trusted Sites Zone 'Don't run antimalware programs against ActiveX controls' to 'Enabled' and select 'Disable' in the drop-down box.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IE11_V2R6_STIG.zip

Item Details

References: CAT|II, CCI|CCI-001662, Rule-ID|SV-223031r961086_rule, STIG-ID|DTBI092-IE11, STIG-Legacy|SV-59875, STIG-Legacy|V-47009, Vuln-ID|V-223031

Plugin: Windows

Control ID: bd151b6d4c6d4b5d4927f65f5a1bfc2cea417a016911f4dd6782055e77a27d93