Adobe Acrobat Reader DC Continuous Track Security Technical Implementation Guide
Rules, Groups, and Values defined within the XCCDF Benchmark
-
Adobe Reader DC must disable the Adobe Repair Installation.
When Repair Installation is disabled the user does not have the option (Help Menu) or functional to repair an Adobe Reader DC install.Rule Low Severity -
SRG-APP-000141
Group -
Adobe Reader DC must disable 3rd Party Web Connectors.
When 3rd Party Web Connectors are disabled it prevents the configuration of Adobe Reader DC access to third party services for file storage.Rule Medium Severity -
SRG-APP-000141
Group -
Adobe Reader DC must disable Acrobat Upsell.
Products that don't provide the full set of features by default provide the user the opportunity to upgrade. Acrobat Upsell displays message which encourage the user to upgrade the product. For exa...Rule Low Severity -
SRG-APP-000141
Group -
Adobe Reader DC must disable Adobe Send for Signature.
The Adobe Document Cloud sign service allows users to send documents online for signature and sign from anywhere or any device. The signed documents are stored in the Adobe Cloud. The Adobe Documen...Rule Low Severity -
SRG-APP-000141
Group -
SRG-APP-000141
Group -
Adobe Reader DC must disable Online SharePoint Access.
Disabling SharePoint disables or removes the user’s ability to add a SharePoint account access controls the application's ability to detect that a file came from a SharePoint server, and disables t...Rule Medium Severity -
SRG-APP-000141
Group -
Adobe Reader DC must disable the Adobe Welcome Screen.
The Adobe Reader DC Welcome screen can be distracting and also has online links to the Adobe quick tips website, tutorials, blogs and community forums. When the Adobe Reader DC Welcome screen is d...Rule Low Severity -
SRG-APP-000141
Group -
Adobe Reader DC must disable Service Upgrades.
By default, Adobe online services are tightly integrated into Adobe Reader DC. Disabling Service Upgrades disables both updates to the product's web-plugin components as well as all services withou...Rule Low Severity -
SRG-APP-000380
Group -
SRG-APP-000380
Group -
Adobe Reader DC must disable the ability to elevate IE Trusts to Privileged Locations.
Privileged Locations allow the user to selectively trust files, folders, and hosts to bypass some security restrictions, such as enhanced security and protected view. By default, the user can creat...Rule Medium Severity -
SRG-APP-000427
Group -
SRG-APP-000427
Group -
Adobe Reader DC must disable periodical uploading of Adobe certificates.
By default, the user can update Adobe certificates from an Adobe server through the GUI. When uploading Adobe certificates is disabled, it prevents the automatic download and installation of certi...Rule Low Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.