Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
Download restrictions must be configured.
Description
Discussion Text
Setting the policy means users cannot bypass download security decisions. There are many types of download warnings within Chrome, which roughly break down into these categories:
- Malicious, as flagged by the Safe Browsing server.
- Uncommon or unwanted, as flagged by the Safe Browsing server.
- A dangerous file type (e.g., all SWF downloads and many EXE downloads).
Setting the policy blocks different subsets of these, depending on its value:
0 = No special restrictions. Default.
1 = Block malicious downloads and dangerous file types.
2 = Block malicious downloads, uncommon or unwanted downloads, and dangerous file types.
3 = Block all downloads.
4 = Block malicious downloads. Recommended.
- Malicious, as flagged by the Safe Browsing server.
- Uncommon or unwanted, as flagged by the Safe Browsing server.
- A dangerous file type (e.g., all SWF downloads and many EXE downloads).
Setting the policy blocks different subsets of these, depending on its value:
0 = No special restrictions. Default.
1 = Block malicious downloads and dangerous file types.
2 = Block malicious downloads, uncommon or unwanted downloads, and dangerous file types.
3 = Block all downloads.
4 = Block malicious downloads. Recommended.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.