Skip to content
ATO Pathways
  Log In

No profile (default benchmark)

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000175

    <GroupDescription></GroupDescription>
    Group
    Show

  • Check for publishers certificate revocation must be enforced.

    &lt;VulnDiscussion&gt;Check for publisher's certificate revocation options should be enforced to ensure all PKI signed objects are validated. Sati...
    Rule Low Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Download signed ActiveX controls property must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;Active X controls can contain potentially malicious code and must only be allowed to be downloaded from trusted sites. Signed...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Download unsigned ActiveX controls property must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;Unsigned code is potentially harmful, especially when coming from an untrusted zone. This policy setting allows you to manage...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;ActiveX controls that are not marked safe for scripting should not be executed. Although this is not a complete security meas...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Java permissions must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by malicious...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Accessing data sources across domains must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;The ability to access data zones across domains could cause the user to unknowingly access content hosted on an unauthorized ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Functionality to drag and drop or copy and paste files must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;Content hosted on sites located in the Internet zone are likely to contain malicious payloads and therefore this feature shou...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Launching programs and files in IFRAME must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Navigating windows and frames across different domains must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;Frames that navigate across different domains are a security concern, because the user may think they are accessing pages on ...
    Rule Medium Severity
    Show

  • SRG-APP-000231

    <GroupDescription></GroupDescription>
    Group
    Show

  • Userdata persistence must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;Userdata persistence must have a level of protection based upon the site being accessed. It is possible for sites hosting mal...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Clipboard operations via script must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;A malicious script could use the clipboard in an undesirable manner, for example, if the user had recently copied confidentia...
    Rule Medium Severity
    Show

  • SRG-APP-000219

    <GroupDescription></GroupDescription>
    Group
    Show

  • Logon options must be configured to prompt (Internet zone).

    &lt;VulnDiscussion&gt;Users could submit credentials to servers operated by malicious individuals who could then attempt to connect to legitimate s...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Java permissions must be configured with High Safety (Intranet zone).

    &lt;VulnDiscussion&gt;Java applications could contain malicious code. This policy setting allows you to manage permissions for Java applets. If you...
    Rule Medium Severity
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Anti-Malware programs against ActiveX controls must be run for the Intranet zone.

    &lt;VulnDiscussion&gt;This policy setting determines whether Internet Explorer runs Anti-Malware programs against ActiveX controls, to check if the...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Java permissions must be configured with High Safety (Trusted Sites zone).

    &lt;VulnDiscussion&gt;Java applications could contain malicious code. This policy setting allows you to manage permissions for Java applets. If you...
    Rule Medium Severity
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Anti-Malware programs against ActiveX controls must be run for the Trusted Sites zone.

    &lt;VulnDiscussion&gt;This policy setting determines whether Internet Explorer runs Anti-Malware programs against ActiveX controls, to check if the...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Dragging of content from different domains within a window must be disallowed (Internet zone).

    &lt;VulnDiscussion&gt;This policy setting allows you to set options for dragging content from one domain to a different domain when the source and ...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Dragging of content from different domains across windows must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;This policy setting allows you to set options for dragging content from one domain to a different domain when the source and ...
    Rule Medium Severity
    Show

  • SRG-APP-000112

    <GroupDescription></GroupDescription>
    Group
    Show

  • Internet Explorer Processes Restrict ActiveX Install must be enforced (Explorer).

    &lt;VulnDiscussion&gt;Users often choose to install software such as ActiveX controls that are not permitted by their organization's security polic...
    Rule Medium Severity
    Show

  • SRG-APP-000112

    <GroupDescription></GroupDescription>
    Group
    Show

  • Internet Explorer Processes Restrict ActiveX Install must be enforced (iexplore).

    &lt;VulnDiscussion&gt;Users often choose to install software such as ActiveX controls that are not permitted by their organization's security polic...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Dragging of content from different domains within a window must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;This policy setting allows you to set options for dragging content from one domain to a different domain when the source and ...
    Rule Medium Severity
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Anti-Malware programs against ActiveX controls must be run for the Internet zone.

    &lt;VulnDiscussion&gt;This policy setting determines whether Internet Explorer runs Anti-Malware programs against ActiveX controls, to check if the...
    Rule Medium Severity
    Show

  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
    Show

  • Anti-Malware programs against ActiveX controls must be run for the Restricted Sites zone.

    &lt;VulnDiscussion&gt;This policy setting determines whether Internet Explorer runs Anti-Malware programs against ActiveX controls, to check if the...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prevent bypassing SmartScreen Filter warnings must be enabled.

    &lt;VulnDiscussion&gt;This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter prevents the ...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prevent bypassing SmartScreen Filter warnings about files that are not commonly downloaded from the internet must be enabled.

    &lt;VulnDiscussion&gt;This policy setting determines whether the user can bypass warnings from SmartScreen Filter. SmartScreen Filter warns the use...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules