DTBI014-IE11 – Turn off Encryption Support must be enabled.
Details This parameter ensures only DoD-approved ciphers and algorithms are enabled for use by the web browser by allowing you...
- Home
- Security Hardening
- DISA STIG IE 11 V2R1
DISA STIG IE 11 V2R1
DTBI015-IE11 – The Internet Explorer warning about certificate address mismatch must be enforced.
Details This parameter warns users if the certificate being presented by the website is invalid. Since server certificates are used...DTBI018-IE11 – Check for publishers certificate revocation must be enforced.
Details Check for publisher’s certificate revocation options should be enforced to ensure all PKI signed objects are validated. Satisfies: SRG-APP-000605...DTBI022-IE11 – The Download signed ActiveX controls property must be disallowed (Internet zone).
Details Active X controls can contain potentially malicious code and must only be allowed to be downloaded from trusted sites....DTBI023-IE11 – The Download unsigned ActiveX controls property must be disallowed (Internet zone).
Details Unsigned code is potentially harmful, especially when coming from an untrusted zone. This policy setting allows you to manage...DTBI024-IE11 – The Initialize and script ActiveX controls not marked as safe property must be disallowed (Internet zone).
Details ActiveX controls that are not marked safe for scripting should not be executed. Although this is not a complete...DTBI062-IE11 – Anti-Malware programs against ActiveX controls must be run for the Intranet zone.
Details This policy setting determines whether Internet Explorer runs Anti-Malware programs against ActiveX controls, to check if they’re safe to...DTBI031-IE11 – The Java permissions must be disallowed (Internet zone).
Details Java applications could contain malicious code; sites located in this security zone are more likely to be hosted by...DTBI032-IE11 – Accessing data sources across domains must be disallowed (Internet zone).
Details The ability to access data zones across domains could cause the user to unknowingly access content hosted on an...DTBI036-IE11 – Functionality to drag and drop or copy and paste files must be disallowed (Internet zone).
Details Content hosted on sites located in the Internet zone are likely to contain malicious payloads and therefore this feature...