Skip to content

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
  • AutoRepublish warning alert in Excel must be enabled.

    &lt;VulnDiscussion&gt;This policy setting allows administrators to disable the AutoRepublish feature in Excel. If users choose to publish Excel dat...
    Rule Medium Severity
  • SRG-APP-000516

    <GroupDescription></GroupDescription>
    Group
  • File extensions must be enabled to match file types in Excel.

    &lt;VulnDiscussion&gt;This policy setting controls how Excel loads file types that do not match their extension. Excel can load files with extensio...
    Rule Medium Severity
  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
  • Scan of encrypted macros in Excel Open XML workbooks must be enabled.

    &lt;VulnDiscussion&gt;This policy setting controls whether encrypted macros in Open XML workbooks be are required to be scanned with anti-virus sof...
    Rule Medium Severity
  • SRG-APP-000112

    <GroupDescription></GroupDescription>
    Group
  • File validation in Excel must be enabled.

    &lt;VulnDiscussion&gt;This policy setting allows you turn off the file validation feature. If you enable this policy setting, file validation will...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • WEBSERVICE Function Notification in Excel must be configured to disable all, with notifications.

    &lt;VulnDiscussion&gt;This policy setting controls how Excel will warn users when WEBSERVICE functions are present. If you enable this policy sett...
    Rule Medium Severity
  • SRG-APP-000210

    <GroupDescription></GroupDescription>
    Group
  • Macros must be blocked from running in Excel files from the Internet.

    &lt;VulnDiscussion&gt;This policy setting allows you to block macros from running in Office files that come from the Internet. If you enable this ...
    Rule Medium Severity
  • SRG-APP-000131

    <GroupDescription></GroupDescription>
    Group
  • Trust Bar notification must be enabled for unsigned application add-ins in Excel and blocked.

    &lt;VulnDiscussion&gt;This policy setting controls whether the specified Office 2016 applications notify users when unsigned application add-ins ar...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Untrusted Microsoft Query files must be blocked from opening in Excel.

    &lt;VulnDiscussion&gt;This policy setting controls whether Microsoft Query files (.iqy, oqy, .dqy, and .rqy) in an untrusted location are prevented...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Untrusted database files must be opened in Excel in Protected View mode.

    &lt;VulnDiscussion&gt;This policy setting controls whether database files (.dbf) opened from an untrusted location are always opened in Protected V...
    Rule Medium Severity
  • SRG-APP-000207

    <GroupDescription></GroupDescription>
    Group
  • Files from Internet zone must be opened in Excel in Protected View mode.

    &lt;VulnDiscussion&gt;This policy setting allows you to determine if files downloaded from the Internet zone open in Protected View. If you enable...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules