TMA-CHROME-1.2.2
Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Safe Browsing is active in the standard mode.' or higher
説明
Control whether Google Chrome's Safe Browsing feature is enabled and the mode in which it operates. If you set this setting as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome. If this setting is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting. - No Protection (0): Safe Browsing is never active. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or from downloading dangerous files. NOTE: Google recommends using Enhanced Safe Browsing Mode (2). The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Safe Browsing Protection Level is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 1 or 2: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:SafeBrowsingProtectionLevel
修正方法
修正方法: ガイダンスまたは IaC パッチ
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Safe Browsing Protection Level = Enabled: Safe Browsing is active in the standard mode
プロパティ
- オペレーティングシステム
- すべて
- タグ
- chromebrowsercis-l1manual
- 参照
- CIS Google Chrome Benchmark v3.0.0 - 1.2.2 Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Safe Browsing is active in the standard mode.' or higher