Skip to content

Microsoft Internet Explorer 11 Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Userdata persistence must be disallowed (Internet zone).

    Userdata persistence must have a level of protection based upon the site being accessed. It is possible for sites hosting malicious content to exploit this feature as part of an attack against visi...
    Rule Medium Severity
  • Java permissions must be configured with High Safety (Intranet zone).

    Java applications could contain malicious code. This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, options can be chosen from the drop-down bo...
    Rule Medium Severity
  • Java permissions must be configured with High Safety (Trusted Sites zone).

    Java applications could contain malicious code. This policy setting allows you to manage permissions for Java applets. If you enable this policy setting, options can be chosen from the drop-down bo...
    Rule Medium Severity
  • Dragging of content from different domains within a window must be disallowed (Restricted Sites zone).

    This policy setting allows you to set options for dragging content from one domain to a different domain when the source and destination are in the same window. If you enable this policy setting, u...
    Rule Medium Severity
  • Prevent bypassing SmartScreen Filter warnings must be enabled.

    This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the user from browsing to or downloading from sites that are known to host m...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules