Check: EDGE-00-000033
Microsoft Edge STIG:
EDGE-00-000033
(in versions v1 r8 through v1 r1)
Title
Browser history must be saved. (Cat II impact)
Discussion
This setting disables deleting browser history and download history and prevents users from changing this setting.
Check Content
The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Enable deleting browser and download history" must be set to "disabled". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge If the value for "AllowDeletingBrowserHistory" is not set to "REG_DWORD = 0", this is a finding.
Fix Text
Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Enable deleting browser and download history" to "disabled".
Additional Identifiers
Rule ID: SV-235750r879554_rule
Vulnerability ID: V-235750
Group Title: SRG-APP-000080
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000166 |
The information system protects against an individual (or process acting on behalf of an individual) falsely denying having performed organization-defined actions to be covered by non-repudiation. |
Controls
Number | Title |
---|---|
AU-10 |
Non-Repudiation |