Skip to content
ATO Pathways
  Log In

III - Administrative Sensitive

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prevent per-user installation of ActiveX controls must be enabled.

    &lt;VulnDiscussion&gt;This policy setting allows you to prevent the installation of ActiveX controls on a per-user basis. If you enable this policy...
    Rule Medium Severity
    Show

  • SRG-APP-000427

    <GroupDescription></GroupDescription>
    Group
    Show

  • Prevent ignoring certificate errors option must be enabled.

    &lt;VulnDiscussion&gt;This policy setting prevents the user from ignoring Secure Sockets Layer/Transport Layer Security (SSL/TLS) certificate error...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    <GroupDescription></GroupDescription>
    Group
    Show

  • Turn on SmartScreen Filter scan option for the Internet Zone must be enabled.

    &lt;VulnDiscussion&gt;This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content. If you enable this po...
    Rule Medium Severity
    Show

  • SRG-APP-000278

    <GroupDescription></GroupDescription>
    Group
    Show

  • Turn on SmartScreen Filter scan option for the Restricted Sites Zone must be enabled.

    &lt;VulnDiscussion&gt;This policy setting controls whether SmartScreen Filter scans pages in this zone for malicious content. If you enable this po...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Initialize and script ActiveX controls not marked as safe must be disallowed (Intranet Zone).

    &lt;VulnDiscussion&gt;ActiveX controls that are not marked safe for scripting should not be executed. Although this is not a complete security meas...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Initialize and script ActiveX controls not marked as safe must be disallowed (Trusted Sites Zone).

    &lt;VulnDiscussion&gt;ActiveX controls that are not marked safe for scripting should not be executed. Although this is not a complete security meas...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Run once selection for running outdated ActiveX controls must be disabled.

    &lt;VulnDiscussion&gt;This feature keeps ActiveX controls up to date and helps make them safer to use in Internet Explorer. Many ActiveX controls a...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Enabling outdated ActiveX controls for Internet Explorer must be blocked.

    &lt;VulnDiscussion&gt;This feature keeps ActiveX controls up to date and helps make them safer to use in Internet Explorer. Many ActiveX controls a...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Internet Zone.

    &lt;VulnDiscussion&gt;This policy setting determines whether users can run the Tabular Data Control (TDC) ActiveX control, based on security zone. ...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Download signed ActiveX controls property must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;ActiveX controls can contain potentially malicious code and must only be allowed to be downloaded from trusted sites. Signed ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Use of the Tabular Data Control (TDC) ActiveX control must be disabled for the Restricted Sites Zone.

    &lt;VulnDiscussion&gt;This policy setting determines whether users can run the Tabular Data Control (TDC) ActiveX control, based on security zone. ...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • VBScript must not be allowed to run in Internet Explorer (Internet zone).

    &lt;VulnDiscussion&gt;This policy setting allows the management of whether VBScript can be run on pages from the specified zone in Internet Explore...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Download unsigned ActiveX controls property must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;Unsigned code is potentially harmful, especially when coming from an untrusted zone. ActiveX controls can contain potentially...
    Rule Medium Severity
    Show

  • SRG-APP-000209

    <GroupDescription></GroupDescription>
    Group
    Show

  • VBScript must not be allowed to run in Internet Explorer (Restricted Sites zone).

    &lt;VulnDiscussion&gt;This policy setting allows the management of whether VBScript can be run on pages from the specified zone in Internet Explore...
    Rule Medium Severity
    Show

  • SRG-APP-000266

    <GroupDescription></GroupDescription>
    Group
    Show

  • Internet Explorer Development Tools Must Be Disabled.

    &lt;VulnDiscussion&gt;While the risk associated with browser development tools is more related to the proper design of a web application, a risk ve...
    Rule Low Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Initialize and script ActiveX controls not marked as safe property must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;ActiveX controls not marked safe for scripting should not be executed. Although this is not a complete security measure for a...
    Rule Medium Severity
    Show

  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
    Show

  • ActiveX controls and plug-ins must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;This policy setting allows you to manage whether ActiveX controls and plug-ins can be run on pages from the specified zone. A...
    Rule Medium Severity
    Show

  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
    Show

  • ActiveX controls marked safe for scripting must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;This policy setting allows management of whether ActiveX controls marked safe for scripting can interact with a script. If yo...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • File downloads must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;Sites located in the Restricted Sites Zone are more likely to contain malicious payloads and therefore downloads from this zo...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Java permissions must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by malicious...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Accessing data sources across domains must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;The ability to access data zones across domains could cause the user to unknowingly access content hosted on an unauthorized ...
    Rule Medium Severity
    Show

  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Allow META REFRESH property must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;It is possible that users will unknowingly be redirected to a site hosting malicious content. 'Allow META REFRESH' must have ...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Functionality to drag and drop or copy and paste files must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;Content hosted on sites located in the Restricted Sites zone are more likely to contain malicious payloads and therefore this...
    Rule Medium Severity
    Show

  • SRG-APP-000141

    <GroupDescription></GroupDescription>
    Group
    Show

  • Launching programs and files in IFRAME must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;This policy setting allows you to manage whether applications may be run and files may be downloaded from an IFRAME reference...
    Rule Medium Severity
    Show

  • SRG-APP-000039

    <GroupDescription></GroupDescription>
    Group
    Show

  • Navigating windows and frames across different domains must be disallowed (Restricted Sites zone).

    &lt;VulnDiscussion&gt;Frames navigating across different domains are a security concern, because the user may think they are accessing pages on one...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules