Skip to content
ATO Pathways
  Log In

Microsoft Edge Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Browser history must be saved.

    <VulnDiscussion>This setting disables deleting browser history and download history and prevents users from changing this setting.</VulnDi...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Edge development tools must be disabled.

    &lt;VulnDiscussion&gt;While the risk associated with browser development tools is more related to the proper design of a web application, a risk ve...
    Rule Low Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Download restrictions must be configured.

    &lt;VulnDiscussion&gt;Configure the type of downloads that Microsoft Edge completely blocks, without letting users override the security decision. ...
    Rule Low Severity
    Show

  • SRG-APP-000378

    <GroupDescription></GroupDescription>
    Group
    Show

  • URLs must be allowlisted for plugin use if used.

    &lt;VulnDiscussion&gt;Define a list of sites, based on URL patterns that can open pop-up windows.&lt;/VulnDiscussion&gt;&lt;FalsePositives&gt;&lt;/...
    Rule Low Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Extensions installation must be blocklisted by default.

    &lt;VulnDiscussion&gt;List specific extensions that users cannot install in Microsoft Edge. When this policy is deployed, any extensions on this li...
    Rule Medium Severity
    Show

  • SRG-APP-000386

    <GroupDescription></GroupDescription>
    Group
    Show

  • Extensions that are approved for use must be allowlisted if used.

    &lt;VulnDiscussion&gt;By default, all extensions are allowed. However, if all extensions are blocked by setting the "ExtensionInstallBlockList" pol...
    Rule Low Severity
    Show

  • SRG-APP-000400

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Password Manager must be disabled.

    &lt;VulnDiscussion&gt;Enable Microsoft Edge to save user passwords. If this policy is enabled, users can save their passwords in Microsoft Edge. T...
    Rule Medium Severity
    Show

  • SRG-APP-000456

    <GroupDescription></GroupDescription>
    Group
    Show

  • The version of Microsoft Edge running on the system must be a supported version.

    &lt;VulnDiscussion&gt;Security flaws with software applications are discovered daily. Vendors are constantly updating and patching their products t...
    Rule High Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Site isolation for every site must be enabled.

    &lt;VulnDiscussion&gt;The "SitePerProcess" policy can be used to prevent users from opting out of the default behavior of isolating all sites. The ...
    Rule Medium Severity
    Show

  • SRG-APP-000142

    <GroupDescription></GroupDescription>
    Group
    Show

  • Supported authentication schemes must be configured.

    &lt;VulnDiscussion&gt;This setting specifies which HTTP authentication schemes are supported. The policy can be configured by using these values: ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules