II - Mission Support Sensitive
Rules and Groups employed by this XCCDF Profile
-
SRG-APP-000233
Group -
The 64-bit tab processes, when running in Enhanced Protected Mode on 64-bit versions of Windows, must be turned on.
This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater compatibility) when running in Enhanced Protected Mode on 6...Rule Medium Severity -
SRG-APP-000175
Group -
Checking for server certificate revocation must be enforced.
This policy setting allows you to manage whether Internet Explorer will check revocation status of servers' certificates. Certificates are revoked when they have been compromised or are no longer v...Rule Low Severity -
SRG-APP-000131
Group -
Checking for signatures on downloaded programs must be enforced.
This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of signed software and verifies it has not been modified or tampered...Rule Medium Severity -
SRG-APP-000516
Group -
All network paths (UNCs) for Intranet sites must be disallowed.
Some UNC paths could refer to servers not managed by the organization, which means they could host malicious content; and therefore, it is safest to not include all UNC paths in the Intranet Sites ...Rule Medium Severity -
SRG-APP-000141
Group -
Script-initiated windows without size or position constraints must be disallowed (Internet zone).
This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows including the title and status bars. If you enable this policy setting, Windows Restrictions sec...Rule Medium Severity
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.