Detections
Analytics

CSCv7|7.2

Title

Disable Unnecessary or Unauthorized Browser or Email Client Plugins

Description

Uninstall or disable any unauthorized browser or email client plugins or add-on applications.

Reference Item Details

Category: Email and Web Browser Protections

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.3.1 Ensure 'Allow read access via the File System API on these sites' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.4 Ensure 'Control use of JavaScript JIT' is set to 'Enabled: Do not allow any site to run JavaScript JIT'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.5 Ensure 'Control use of the File System API for reading' is set to 'Enabled: Don't allow any site to request read access to files and directories'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.6 Ensure 'Control use of the File System API for writing' is set to 'Enabled: Don't allow any site to request write access to files and directories'WindowsCIS Microsoft Edge L1 v2.0.0
1.3.7 Ensure 'Control use of the Web Bluetooth API' is set to 'Enabled: Do not allow any site to request access to Bluetooth'WindowsCIS Microsoft Edge L2 v2.0.0
1.3.8 Ensure 'Control use of the WebHID API' is set to 'Enabled: Do not allow any site to request access to HID devices via the WebHID API'WindowsCIS Microsoft Edge L2 v2.0.0
1.5.1 Ensure 'Configure users ability to override feature flags' is set to 'Enabled: Prevent users from overriding feature flags'WindowsCIS Microsoft Edge L1 v2.0.0
1.6.1 Ensure 'Configure extension management settings' is set to 'Enabled: *'WindowsCIS Microsoft Edge L2 v2.0.0
1.14.1 Ensure 'Enable startup boost' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.18 Ensure 'Enable security warnings for command-line flags' is set to 'Enabled'WindowsCIS Google Chrome L1 v3.0.0
1.35 Ensure 'Allow managed extensions to use the Enterprise Hardware Platform API' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.41 Ensure 'Allow remote debugging' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.43 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.49 Ensure 'AutoLaunch Protocols Component Enabled' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.69 Ensure 'Control use of the Serial API' is set to 'Enable: Do not allow any site to request access to serial ports via the Serial API'WindowsCIS Microsoft Edge L2 v2.0.0
1.78 Ensure 'Enable browser legacy extension point blocking' is set to 'Enabled'WindowsCIS Microsoft Edge L1 v2.0.0
1.113 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v2.0.0 L1 + BL
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL + NG
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 EMS Gateway v2.0.0 L1
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 DC L1 v3.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + NG
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Windows Server 2012 MS L1 v3.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 11 Enterprise v2.0.0 L1
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Windows Server 2012 DC L1 v3.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Windows Server 2012 R2 MS L1 v3.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 DC L1 v2.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2022 v2.0.0 L1 MS
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2016 MS L1 v2.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L1 + BL
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 MS Standalone L1 v1.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2022 v2.0.0 L1 DC
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 11 Stand-alone v2.0.0 L1
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + NG
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 MS L1 v2.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2016 DC L1 v2.0.0
18.10.58.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled' - EnabledWindowsCIS Microsoft Windows Server 2019 Standalone DC L1 vCIS Microsoft Windows Server 2019 Standalone DC L1 v1.0.0
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + NG
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + BL + NG
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL + NG
18.10.59.1 Ensure 'Prevent downloading of enclosures' is set to 'Enabled'WindowsCIS Microsoft Intune for Windows 11 v2.0.0 L1 + NG