TMA-CHROME-1.2.2
Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Safe Browsing is active in the standard mode.' or higher
Описание
Control whether Google Chrome's Safe Browsing feature is enabled and the mode in which it operates. If you set this setting as mandatory, users cannot change or override the Safe Browsing setting in Google Chrome. If this setting is left not set, Safe Browsing will operate in Standard Protection mode but users can change this setting. - No Protection (0): Safe Browsing is never active. Rationale: Google Safe Browsing will help protect users from a variety of malicious and fraudulent sites, or from downloading dangerous files. NOTE: Google recommends using Enhanced Safe Browsing Mode (2). The benchmark marks this recommendation Manual (organisation-specific value or not reliably checkable), so it is reported as SKIP with review steps.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Confirm via Group Policy (gpresult /h or the GPMC) that Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Safe Browsing Protection Level is configured as the title requires. This group policy setting is backed by the following registry location which should be set to 1 or 2: Registry: HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Google\Chrome:SafeBrowsingProtectionLevel
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Configure through Group Policy: Computer Configuration\Policies\Administrative Templates\Google\Google Chrome\Safe Browsing settings\Safe Browsing Protection Level = Enabled: Safe Browsing is active in the standard mode
Свойства
- Операционные системы
- Любая
- Теги
- chromebrowsercis-l1manual
- Источник
- CIS Google Chrome Benchmark v3.0.0 - 1.2.2 Ensure 'Safe Browsing Protection Level' is set to 'Enabled: Safe Browsing is active in the standard mode.' or higher