Check: EDGE-00-000033
Microsoft Edge STIG:
EDGE-00-000033
(in versions v2 r2 through v1 r1)
Title
Browser history must be saved. (Cat II impact)
Discussion
This setting disables deleting browser history and download history and prevents users from changing this setting.
Check Content
The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Enable deleting browser and download history" must be set to "disabled". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge If the value for "AllowDeletingBrowserHistory" is not set to "REG_DWORD = 0", this is a finding.
Fix Text
Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Enable deleting browser and download history" to "disabled".
Additional Identifiers
Rule ID: SV-235750r960864_rule
Vulnerability ID: V-235750
Group Title: SRG-APP-000080
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000166 |
Provide irrefutable evidence that an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation. |
Controls
Number | Title |
---|---|
AU-10 |
Non-repudiation |