Check: EDGE-00-000061
Microsoft Edge STIG:
EDGE-00-000061
(in versions v1 r8 through v1 r2)
Title
Relaunch notification must be required. (Cat II impact)
Discussion
Users must be required to restart the browser to finish installation of pending updates and prevent users from continually using an old/vulnerable browser version.
Check Content
The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Notify a user that a browser restart is recommended or required for pending updates" must be set to "Enabled" with the option value set to "Required". Use the Windows Registry Editor to navigate to the following key: HKLM\SOFTWARE\Policies\Microsoft\Edge If the value for "RelaunchNotification" is not set to "REG_DWORD = 2", this is a finding.
Fix Text
Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Notify a user that a browser restart is recommended or required for pending updates" web-browsing activity to "Required".
Additional Identifiers
Rule ID: SV-235773r951016_rule
Vulnerability ID: V-235773
Group Title: SRG-APP-000156
Expert Comments
CCIs
| Number | Definition |
|---|---|
| CCI-000381 |
The organization configures the information system to provide only essential capabilities. |
| CCI-000396 |
The organization documents an inventory of information system components that is at the level of granularity deemed necessary for tracking and reporting. |