Back

Configure the "Disable downloading of site subscription content" setting.


CONTROL ID
04373
CONTROL TYPE
Configuration
CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS



This Control directly supports the implied Control(s):
  • Configure Internet Browser security options according to organizational standards., CC ID: 02166

There are no implementation support Controls.


SELECTED AUTHORITY DOCUMENTS COMPLIED WITH



  • This setting prevents users from downloading subscription content. For Enterprise Client environments, the Disable Downloading Of Site Subscription Content setting should be set to Enabled. For Specialized Security - Limited Functionality environments, this setting is Not Configured. (Pg 117, Microsoft Windows Vista Security Guide Appendix A: Security Group Policy Settings)
  • The "Disable Downloading Of Site Subscription Content" setting should be configured correctly. Technical Mechanisms: HKCU\Software\Policies\Microsoft\Internet Explorer\Infodelivery\Restrictions\NoSubscriptionContent Parameters: enabled/disabled References: CCE-74 oval:org.mitre.oval:def:1080 Disa… (CCE-4120-2, Common Configuration Enumeration List, Combined XML: Internet Explorer 7, 5.20130214)
  • This setting prevents users from downloading subscription content from Web sites. The Offline Pages\Disable Downloading Of Site Subscription Content setting should be Enabled. (Pg 125, NSA Guide to Security Microsoft Windows XP)