Details

Enables Google Chrome’s Safe Browsing Extended Reporting and prevents users from changing this setting. Extended Reporting sends some system information and page content to Google servers to help detect dangerous apps and sites.

If the setting is set to ‘True’, then reports will be created and sent whenever necessary (such as when a security interstitial is shown).

If the setting is set to ‘False’, reports will never be sent.

If this policy is set to ‘True’ or ‘False’, the user will not be able to modify the setting.

If this policy is left unset, the user will be able to change the setting and decide whether to send reports or not.

Solution

Windows group policy:
1. Open the ‘group policy editor’ tool with gpedit.msc
2. Navigate to Policy Path: Computer ConfigurationAdministrative TemplatesGoogleGoogle ChromeSafe Browsing settings
Policy Name: Enable Safe Browsing Extended Reporting
Policy State: Disabled
Policy Value: N/A

Supportive Information

The following resource is also helpful.

• https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Chrome_V2R4_STIG.zip

This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Windows.

References

• 800-53|SC-18(1)
• CAT|II
• CCI|CCI-001166
• Rule-ID|SV-221590r615937_rule
• STIG-ID|DTBC-0057
• STIG-Legacy|SV-96299
• STIG-Legacy|V-81585
• Vuln-ID|V-221590

Source

• Tenable.com/audits