Microsoft Outlook 2010 STIG
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Navigation to URL's embedded in Office products must be blocked.
<VulnDiscussion>To protect users from attacks, Internet Explorer usually does not attempt to load malformed URLs. This functionality can be c...Rule Medium Severity -
DTOO129 - Block Pop-Ups
<GroupDescription></GroupDescription>Group -
Links that invoke instances of IE from within an Office product must be blocked.
<VulnDiscussion>The Pop-up Blocker feature in Internet Explorer can be used to block most unwanted pop-up and pop-under windows from appearin...Rule Medium Severity -
DTOO272 - Content download from safe zones
<GroupDescription></GroupDescription>Group -
Permit download of content from safe zones must be configured.
<VulnDiscussion>By default, Outlook automatically downloads content from sites that are considered "safe," as defined in the Security tab of ...Rule Medium Severity -
DTOO219 - Access to Published Calendars
<GroupDescription></GroupDescription>Group -
Access restriction settings for published calendars must be configured.
<VulnDiscussion>Users can share their calendars with others by publishing them to the Microsoft Office Online Calendar Sharing Services and t...Rule Medium Severity -
DTOO224 - Email Recipient to Safe Sender List
<GroupDescription></GroupDescription>Group -
Recipients of sent email must be unable to be added to the safe sender's list.
<VulnDiscussion>Users could send e-mail messages to request that they be taken off a mailing list. If the e-mail recipient is then automatica...Rule Medium Severity -
DTOO234 - Active X One-Off Forms
<GroupDescription></GroupDescription>Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.