Skip to content
ATO Pathways
  Log In

Microsoft Edge Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Share Experience feature must be disabled.

    <VulnDiscussion>If this policy is set to "ShareAllowed" (the default), users will be able to access the Windows 10 Share experience from the ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Guest mode must be disabled.

    &lt;VulnDiscussion&gt;Enabling Guest mode allows the use of guest profiles in Microsoft Edge. In a guest profile, the browser does not import brows...
    Rule Medium Severity
    Show

  • SRG-APP-000156

    <GroupDescription></GroupDescription>
    Group
    Show

  • Relaunch notification must be required.

    &lt;VulnDiscussion&gt;Users must be required to restart the browser to finish installation of pending updates and prevent users from continually us...
    Rule Medium Severity
    Show

  • SRG-APP-000157

    <GroupDescription></GroupDescription>
    Group
    Show

  • The built-in DNS client must be disabled.

    &lt;VulnDiscussion&gt;This setting controls whether to use the built-in DNS client. This does not affect which DNS servers are used; it only contr...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Use of the QUIC protocol must be disabled.

    &lt;VulnDiscussion&gt;QUIC is used by more than half of all connections from the Edge web browser to Google's servers, and this activity is undesir...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The list of domains media autoplay allows must be allowlisted if used.

    &lt;VulnDiscussion&gt;Define a list of sites, based on URL patterns, that are allowed to autoplay media. If this policy is not configured, the glo...
    Rule Low Severity
    Show

  • Site tracking of a user’s location must be disabled.

    &lt;VulnDiscussion&gt;Set whether websites can track users' physical locations. Tracking can be allowed by default ("AllowGeolocation") or denied b...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules