Detections
Analytics

CSCv7|7.1

Title

Ensure Use of Only Fully Supported Browsers and Email Clients

Description

Ensure that only fully supported web browsers and email clients are allowed to execute in the organization, ideally only using the latest version of the browsers and email clients provided by the vendor.

Reference Item Details

Category: Email and Web Browser Protections

Audit Items

View all Reference Audit Items

NamePluginAudit Name
1.43 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v2.0.0
1.43 Ensure 'Allow unconfigured sites to be reloaded in Internet Explorer mode' is set to 'Disabled'WindowsCIS Microsoft Edge L2 v1.1.0
1.107 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v1.1.0
1.113 Ensure 'Show the Reload in Internet Explorer mode button in the toolbar' is set to 'Disabled'WindowsCIS Microsoft Edge L1 v2.0.0
18.9.48.12 Ensure 'Prevent certificate error overrides' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1
18.9.48.12 Ensure 'Prevent certificate error overrides' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL
18.9.48.12 Ensure 'Prevent certificate error overrides' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + BL + NG
18.9.48.12 Ensure 'Prevent certificate error overrides' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1 + NG
18.9.48.12 Ensure 'Prevent certificate error overrides' is set to 'Enabled'WindowsCIS Microsoft Windows 10 Enterprise (Release 20H2) v1.10.1 L1
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 NG
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 EMS Gateway v3.0.0 L1
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL + NG
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + BL
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1 + NG
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1 BL NG
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v3.0.0 L1
18.10.34.1 (L1) Ensure 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v3.0.0 L1
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + NG
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + NG
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL + NG
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1 + BL
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + NG
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 EMS Gateway v2.0.0 L1
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1 + BL + NG
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Intune for Windows 10 v2.0.0 L1
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Stand-alone v2.0.0 L1 + BL + NG
18.10.35.1 'Disable Internet Explorer 11 as a standalone browser' is set to 'Enabled: Always'WindowsCIS Microsoft Windows 10 Enterprise v2.0.0 L1
19.7.4.1 (L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1 Bitlocker
19.7.4.1 (L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1
19.7.4.1 (L1) Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows 8.1 v2.4.0 L1 Bitlocker
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 MS L1 v1.2.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 STIG NG MS L3 v1.0.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 DC L1 v1.3.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows 10 Enterprise (Release 2004) v1.9.1 L1
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows 8.1 v2.4.1 L1
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.2.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 R2 Member Server Level 1 v3.3.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 Member Server Level 1 v3.2.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 STIG MS L1 v1.0.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 Domain Controller Level 1 v3.3.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Windows Server 2012 R2 MS L1 v2.4.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2016 DC L1 v1.2.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Windows Server 2012 DC L1 v2.2.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Windows Server 2012 R2 DC L1 v2.4.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Microsoft Windows Server 2008 R2 Domain Controller Level 1 v3.2.0
19.7.4.1 Ensure 'Do not preserve zone information in file attachments' is set to 'Disabled'WindowsCIS Windows Server 2012 MS L1 v2.2.0