Skip to content
ATO Pathways
  Log In

Microsoft Edge Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • Online revocation checks must be performed.

    <VulnDiscussion>If you enable this policy, Microsoft Edge will perform soft-fail, online OCSP/CRL checks. "Soft fail" means that if the revoc...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of cookies must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import cookies from another browser into Microsoft Edge. If this policy is disabled, cookies are not importe...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of extensions must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import extensions from another browser into Microsoft Edge. If this policy is enabled, the Extensions check ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group
    Show

  • Bypassing Microsoft Defender SmartScreen prompts for sites must be disabled.

    &lt;VulnDiscussion&gt;This policy setting allows a decision to be made on whether users can override the Microsoft Defender SmartScreen warnings ab...
    Rule Medium Severity
    Show

  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group
    Show

  • Bypassing of Microsoft Defender SmartScreen warnings about downloads must be disabled.

    &lt;VulnDiscussion&gt;This policy setting allows a decision to be made on whether users can override Microsoft Defender SmartScreen warnings about ...
    Rule Medium Severity
    Show

  • SRG-APP-000073

    <GroupDescription></GroupDescription>
    Group
    Show

  • The list of domains for which Microsoft Defender SmartScreen will not trigger warnings must be allowlisted if used.

    &lt;VulnDiscussion&gt;Configure the list of Microsoft Defender SmartScreen trusted domains. This means Microsoft Defender SmartScreen will not chec...
    Rule Low Severity
    Show

  • SRG-APP-000080

    <GroupDescription></GroupDescription>
    Group
    Show

  • InPrivate mode must be disabled.

    &lt;VulnDiscussion&gt;This setting specifies whether the user can open pages in InPrivate mode in Microsoft Edge. If this policy is not configured...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Background processing must be disabled.

    &lt;VulnDiscussion&gt;Background processing allows Microsoft Edge processes to start at OS sign-in and keep running after the last browser window i...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The ability of sites to show pop-ups must be disabled.

    &lt;VulnDiscussion&gt;Set whether websites can show pop-up windows. Pop-ups can be allowed on all websites ("AllowPopups") or blocked on all sites ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of browser settings must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import browser settings from another browser into Microsoft Edge. If this policy is enabled, the Browser set...
    Rule Low Severity
    Show

  • The default search provider must be set to use an encrypted connection.

    &lt;VulnDiscussion&gt;Allows a list of list of up to 10 search engines to be configured, one of which must be marked as the default search engine. ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Data Synchronization must be disabled.

    &lt;VulnDiscussion&gt;Disables data synchronization in Microsoft Edge. This policy also prevents the sync consent prompt from appearing. If this p...
    Rule Low Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Network prediction must be disabled.

    &lt;VulnDiscussion&gt;Enables network prediction and prevents users from changing this setting. This controls DNS prefetching, TCP and SSL pre-con...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Search suggestions must be disabled.

    &lt;VulnDiscussion&gt;Enables web search suggestions in the Microsoft Edge Address Bar and Auto-Suggest List, and prevents users from changing this...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of autofill form data must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import autofill form data from another browser into Microsoft Edge. If this policy is enabled, the option to...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of browsing history must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import their browsing history from another browser into Microsoft Edge. If this policy is enabled, the Brows...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of home page settings must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import their home page setting from another browser into Microsoft Edge. If this policy is enabled, the opti...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of open tabs must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import open and pinned tabs from another browser into Microsoft Edge. If this policy is enabled, the Open ta...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of payment info must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import payment info from another browser into Microsoft Edge. If this policy is enabled, the payment info ch...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of saved passwords must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import saved passwords from another browser into Microsoft Edge. If this policy is enabled, the option to ma...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of search engine settings must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import search engine settings from another browser into Microsoft Edge. If this policy is enabled, the optio...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Importing of shortcuts must be disabled.

    &lt;VulnDiscussion&gt;Allows users to import Shortcuts from another browser into Microsoft Edge. If this policy is disabled, Shortcuts are not imp...
    Rule Medium Severity
    Show

  • AutoplayAllowed must be set to disabled.

    &lt;VulnDiscussion&gt;This policy sets the media autoplay policy for websites. The default setting "Not configured" respects the current media aut...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • WebUSB must be disabled.

    &lt;VulnDiscussion&gt;Set whether websites can access connected USB devices. Access can be blocked completely or the user asked each time a website...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Google Cast must be disabled.

    &lt;VulnDiscussion&gt;Enable this policy to enable Google Cast. Users will be able to launch it from the app menu, page context menus, media contro...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules