Detections
Analytics

DTBI760-IE11 - Browser must retain history on exit.

Information

Delete Browsing History on exit automatically deletes specified items when the last browser window closes. Disabling this function will prevent users from deleting their browsing history, which could be used to identify malicious websites and files that could later be used for anti-virus and Intrusion Detection System (IDS) signatures. Furthermore, preventing users from deleting browsing history could be used to identify abusive web surfing on government systems.

Solution

Set the policy value for Computer Configuration -> Administrative Templates -> Windows Components -> Internet Explorer -> Delete Browsing History -> 'Allow deleting browsing history on exit' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_MS_IE11_V2R6_STIG.zip

Item Details

Category: AUDIT AND ACCOUNTABILITY

References: 800-53|AU-12a., CAT|II, CCI|CCI-000169, Rule-ID|SV-223126r960879_rule, STIG-ID|DTBI760-IE11, STIG-Legacy|SV-59695, STIG-Legacy|V-46829, Vuln-ID|V-223126

Plugin: Windows

Control ID: bb0fcc7160b9ae42bf7d9a3b4592ed31b405e386c32d204ebb8bf59ac1f90e26