Skip to content
ATO Pathways
  Log In

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • DTOO126 - Add-on Management

    <GroupDescription></GroupDescription>
    Group
    Show

  • Add-on Management functionality must be allowed.

    &lt;VulnDiscussion&gt;Internet Explorer add-ons are pieces of code, run in Internet Explorer, to provide additional functionality. Rogue add-ons ma...
    Rule Medium Severity
    Show

  • DTOO209 - Zone Elevation Protection

    <GroupDescription></GroupDescription>
    Group
    Show

  • Protection from zone elevation must be enforced.

    &lt;VulnDiscussion&gt;Internet Explorer places restrictions on each web page users can use the browser to open. Web pages on a user's local compute...
    Rule Medium Severity
    Show

  • DTOO211 - Restrict ActiveX Install

    <GroupDescription></GroupDescription>
    Group
    Show

  • ActiveX Installs must be configured for proper restriction.

    &lt;VulnDiscussion&gt;Microsoft ActiveX controls allow unmanaged, unprotected code to run on the user computers. ActiveX controls do not run within...
    Rule Medium Severity
    Show

  • DTOO132 - Restrict File Download

    <GroupDescription></GroupDescription>
    Group
    Show

  • File Downloads must be configured for proper restrictions.

    &lt;VulnDiscussion&gt;Disabling this setting allows websites to present file download prompts via code without the user specifically initiating the...
    Rule Medium Severity
    Show

  • DTOO124 - Scripted Window Security

    <GroupDescription></GroupDescription>
    Group
    Show

  • Scripted Window Security must be enforced.

    &lt;VulnDiscussion&gt;Malicious websites often try to confuse or trick users into giving a site permission to perform an action allowing the site t...
    Rule Medium Severity
    Show

  • DTOO128 - Data Execution Prevention

    <GroupDescription></GroupDescription>
    Group
    Show

  • Data Execution Prevention must be enforced.

    &lt;VulnDiscussion&gt;Data Execution Prevention (DEP) is a set of hardware and software technologies performing additional checks on memory to help...
    Rule Medium Severity
    Show

  • DTOO313 - Automatically download enclosures

    <GroupDescription></GroupDescription>
    Group
    Show

  • Automatically downloading enclosures on RSS must be disallowed.

    &lt;VulnDiscussion&gt;This policy setting allows you to control whether Outlook automatically downloads enclosures on RSS items. &lt;/VulnDiscussio...
    Rule Medium Severity
    Show

  • DTOO344 - Outlook Rich Text options

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook Rich Text options must be set for converting to plain text format.

    &lt;VulnDiscussion&gt;Outlook automatically converts RTF formatted messages that are sent over the Internet to HTML format, so that the message for...
    Rule Medium Severity
    Show

  • DTOO314 - Set message format

    <GroupDescription></GroupDescription>
    Group
    Show

  • Default message format must be set to use Plain Text.

    &lt;VulnDiscussion&gt;Outlook uses HTML as the default e-mail format, but users can choose a format other than the default when composing messages....
    Rule Medium Severity
    Show

  • DTOO315 - Outlook Security settings

    <GroupDescription></GroupDescription>
    Group
    Show

  • Outlook must be configured not to prompt users to choose security settings if default settings fail.

    &lt;VulnDiscussion&gt;Prompts the user to choose security settings if default settings fail; uncheck to automatically select. &lt;/VulnDiscussion&g...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules