Home
Security Hardening
DISA STIG IE 11 V2R1

DISA STIG IE 11 V2R1

DTBI356-IE11 – The 64-bit tab processes, when running in Enhanced Protected Mode on 64-bit versions of Windows, must be turned on.
Details This policy setting determines whether Internet Explorer 11 uses 64-bit processes (for greater security) or 32-bit processes (for greater...
DTBI365-IE11 – Checking for server certificate revocation must be enforced.
Details This policy setting allows you to manage whether Internet Explorer will check revocation status of servers’ certificates. Certificates are...
DTBI370-IE11 – Checking for signatures on downloaded programs must be enforced.
Details This policy setting allows you to manage whether Internet Explorer checks for digital signatures (which identifies the publisher of...
DTBI375-IE11 – All network paths (UNCs) for Intranet sites must be disallowed.
Details Some UNC paths could refer to servers not managed by the organization, which means they could host malicious content;...
DTBI385-IE11 – Script-initiated windows without size or position constraints must be disallowed (Internet zone).
Details This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows including the title and status...
DTBI390-IE11 – Script-initiated windows without size or position constraints must be disallowed (Restricted Sites zone).
Details This policy setting allows you to manage restrictions on script-initiated pop-up windows and windows including the title and status...
DTBI415-IE11 – Automatic prompting for file downloads must be disallowed (Internet zone).
Details This policy setting determines whether users will be prompted for non user-initiated file downloads. Regardless of this setting, users...
DTBI395-IE11 – Scriptlets must be disallowed (Internet zone).
Details This policy setting allows you to manage whether scriptlets can be allowed. Scriptlets hosted on sites located in this...

DISA STIG IE 11 V2R1

DTBI356-IE11 – The 64-bit tab processes, when running in Enhanced Protected Mode on 64-bit versions of Windows, must be turned on.

DTBI365-IE11 – Checking for server certificate revocation must be enforced.

DTBI370-IE11 – Checking for signatures on downloaded programs must be enforced.

DTBI375-IE11 – All network paths (UNCs) for Intranet sites must be disallowed.

DTBI385-IE11 – Script-initiated windows without size or position constraints must be disallowed (Internet zone).

DTBI390-IE11 – Script-initiated windows without size or position constraints must be disallowed (Restricted Sites zone).

DTBI415-IE11 – Automatic prompting for file downloads must be disallowed (Internet zone).

DTBI395-IE11 – Scriptlets must be disallowed (Internet zone).