Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Safe Browsing is active in the standard mode.' or higher

HighLevel 1Manual reviewchrome

Description

Control whether Google Chrome's Safe Browsing feature is enabled and the mode in which it operates. If you set this setting as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome. If this setting is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting. - No Protection (0): Safe Browsing is never active. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or from downloading dangerous files. NOTE: Google recommends using Enhanced Safe Browsing Mode (2). The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.

How it is checked

Audit method: Manual review

This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.

Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Safe Browsing Protection Level is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 1 or 2: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:SafeBrowsingProtectionLevel

How it is fixed

Fix method: Guidance or infrastructure patch

Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Safe Browsing Protection Level = Enabled: Safe Browsing is active in the standard mode

Properties

Operating systems: Any
Tags: chromebrowsercis-l1manual
Reference: CIS Google Chrome Benchmark v3.0.0 - 1.2.2 Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Safe Browsing is active in the standard mode.' or higher