CIS Microsoft Windows 10 Enterprise Release 1909 Benchmark

18.9.60 RSS Feeds

This section contains recommendations related to RSS feeds.

This Group Policy section is provided by the Group Policy template InetRes.admx/adml that is included with all versions of the Microsoft Windows Administrative Templates.

18.9.60.1 (L1) Ensure 'Prevent downloading of enclosures' is set to 'Enabled' (Scored)

ProfileApplicability:

 Level 1 (L1) - Corporate/Enterprise Environment (general use)

Description:

This policy setting prevents the user fromhaving enclosures (file attachments) downloaded from an RSS feed to the user's computer.

The recommended state for this setting is: Enabled .

Rationale:

Allowing attachments to be downloaded through the RSS feed can introduce files that could have malicious intent.

Audit:

Navigate to the UI Path articulated in the Remediation section and confirm it is set as prescribed. This group policy setting is backed by the following registry location:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Internet Explorer\Feeds:DisableEnclosureDownload

1047 | P a g e