Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • DTOO128 - Data Execution Prevention

    <GroupDescription></GroupDescription>
    Group
  • Data Execution Prevention must be enforced.

    &lt;VulnDiscussion&gt;Data Execution Prevention (DEP) is a set of hardware and software technologies performing additional checks on memory to help...
    Rule Medium Severity
  • DTOO313 - Automatically download enclosures

    <GroupDescription></GroupDescription>
    Group
  • Automatically downloading enclosures on RSS must be disallowed.

    &lt;VulnDiscussion&gt;This policy setting allows you to control whether Outlook automatically downloads enclosures on RSS items. &lt;/VulnDiscussio...
    Rule Medium Severity
  • DTOO344 - Outlook Rich Text options

    <GroupDescription></GroupDescription>
    Group
  • Outlook Rich Text options must be set for converting to plain text format.

    &lt;VulnDiscussion&gt;Outlook automatically converts RTF formatted messages that are sent over the Internet to HTML format, so that the message for...
    Rule Medium Severity
  • DTOO314 - Set message format

    <GroupDescription></GroupDescription>
    Group
  • Default message format must be set to use Plain Text.

    &lt;VulnDiscussion&gt;Outlook uses HTML as the default e-mail format, but users can choose a format other than the default when composing messages....
    Rule Medium Severity
  • DTOO315 - Outlook Security settings

    <GroupDescription></GroupDescription>
    Group
  • Outlook must be configured not to prompt users to choose security settings if default settings fail.

    &lt;VulnDiscussion&gt;Prompts the user to choose security settings if default settings fail; uncheck to automatically select. &lt;/VulnDiscussion&g...
    Rule Medium Severity
  • DTOO316 - Minimum encryption settings

    <GroupDescription></GroupDescription>
    Group
  • Outlook minimum encryption key length settings must be set.

    &lt;VulnDiscussion&gt;This setting allows you to set the minimum key length for an encrypted e-mail message.&lt;/VulnDiscussion&gt;&lt;FalsePositiv...
    Rule Medium Severity
  • DTOO317 - Signed/encrypted messages

    <GroupDescription></GroupDescription>
    Group
  • Replies or forwards to signed/encrypted messages must be signed/encrypted.

    &lt;VulnDiscussion&gt;This setting controls whether replies and forwards to signed/encrypted mail should also be signed/encrypted. &lt;/VulnDiscu...
    Rule Medium Severity
  • DTOO320 - Check e-mail address against certificate

    <GroupDescription></GroupDescription>
    Group
  • Check e-mail addresses against addresses of certificates being used must be disallowed.

    &lt;VulnDiscussion&gt;This policy setting controls whether Outlook verifies the user's e-mail address with the address associated with the certific...
    Rule Medium Severity
  • DTOO425 - Disable Internet and network path into hyperlinks

    <GroupDescription></GroupDescription>
    Group
  • Text in Outlook that represents Internet and network paths must not be automatically turned into hyperlinks.

    &lt;VulnDiscussion&gt;The ability of Outlook to automatically turn text that represents Internet and network paths into hyperlinks would allow user...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules