Ensure ‘Allow download restrictions’ is set to ‘Enabled: Block dangerous downloads’
Details Google Chrome can block certain types of downloads, and won’t let users bypass the security warnings, depending on the...
- Home
- Security Hardening
- CIS Google Chrome L1 V2.1.0
CIS Google Chrome L1 V2.1.0
Ensure ‘Allow Google Cast to connect to Cast devices on all IP addresses’ is set to ‘Disabled’
Details This setting controls whether Google Cast is able to connect to all IP Addresses or only private IP Addresses...Ensure ‘Allow queries to a Google time service’ is set to ‘Enabled’
Details This setting controls whether Google Chrome can send queries to a Google time service for accurate timestamps. This check...Ensure ‘Allow remote access connections to this machine’ is set to ‘Disabled’
Details This is a setting for Chrome Remote desktop. If this setting is Disabled, the remote access host service cannot...Ensure ‘Allow remote users to interact with elevated windows in remote assistance sessions’ is set to ‘Disabled’
Details Google Chrome can be set to run the remote assistance host in a process with uiAccess permissions. This allows...Ensure ‘Allow the audio sandbox to run’ is set to ‘Enabled’
Details This setting controls whether audio processes in Google Chrome run in a sandbox. NOTE: Security software setups within your...Ensure ‘Ask where to save each file before downloading’ is set to ‘Enabled’
Details Google Chrome offers to download files automatically to the default download directory without prompting. If this setting is enabled,...Ensure ‘Blocks external extensions from being installed’ is set to ‘Enabled’
Details Enabling this setting blocks external extensions (an extension that is not installed from the Chrome Web Store) from being...Ensure ‘Configure allowed app/extension types’ is set to ‘Enabled: extension, hosted_app, platform_app, theme’ – extension
Details Enabling this setting allows you to specify which app/extensions types are allowed. Disabled (0): Results in no restrictions on...Ensure ‘Configure allowed app/extension types’ is set to ‘Enabled: extension, hosted_app, platform_app, theme’ – hosted_app
Details Enabling this setting allows you to specify which app/extensions types are allowed. Disabled (0): Results in no restrictions on...