BaselineWatch
33 requirements
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

DISA STIG library V6R9

33 requirements · published 2026-10-05
Changes in this version
AllCAT ICAT IICAT III
RefTitleText
FFOX-00-000001 The installed version of Firefox must be supported. Run Firefox. Click the ellipsis button >> Help >> About Firefox, and view the version number. If the Firefox version is not a supported version, this is a finding.
FFOX-00-000002 Firefox must be configured to allow only TLS 1.2 or above. Type "about:policies" in the browser window. If "SSLVersionMin" is not displayed under Policy Name or the Policy Value is not "tls1.2" or "tls1.3", this is a finding.
FFOX-00-000003 Firefox must be configured to ask which certificate to present to a website when a certificate is required. Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name and the Policy Value does not include "security.default_personal_cert" with a value of "Ask Every Time" and status of "locked", this is a
FFOX-00-000004 Firefox must be configured to not automatically check for updated versions of installed search plugins. Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "browser.search.update" with a value of "false" and status of "locked", this is a finding.
FFOX-00-000005 Firefox must be configured to not automatically update installed add-ons and plugins. Type "about:policies" in the browser window. If "ExtensionUpdate" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.
FFOX-00-000006 Firefox must be configured to not automatically execute or download MIME types that are not authorized for auto-download. Type "about:preferences" in the browser address bar. Type "Applications" in the Find bar in the upper-right corner. Determine if any of the following file extensions are listed: HTA, JSE, JS, MOCHA, SHS, VBE, VBS, SCT, WSC, FDF, XFDF, LSL,
FFOX-00-000007 Firefox must be configured to disable form fill assistance. Type "about:policies" in the browser window. If "DisableFormHistory" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000008 Firefox must be configured to not use a password store with or without a master password. Type "about:policies" in the browser window. If "PasswordManagerEnabled" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.
FFOX-00-000009 Firefox must be configured to block pop-up windows. Type "about:policies" in the browser address bar. If "PopupBlocking" is not displayed under Policy Name or the Policy Value is not "Default" "true", this is a finding. If "PopupBlocking" is not displayed under Policy Name or the Policy Valu
FFOX-00-000010 Firefox must be configured to prevent JavaScript from moving or resizing windows. Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_move_resize" with a value of "true" and status of "locked", this is a finding.
FFOX-00-000011 Firefox must be configured to prevent JavaScript from raising or lowering windows. Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "dom.disable_window_flip" with a value of "true" and status of "locked", this is a finding.
FFOX-00-000013 Firefox must be configured to disable the installation of extensions. Type "about:policies" in the browser address bar. If "InstallAddonsPermission" is not displayed under Policy Name or the Policy Value is not "Default" "false", this is a finding.
FFOX-00-000014 Background submission of information to Mozilla must be disabled. Type "about:policies" in the browser window. If "DisableTelemetry" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000015 Firefox development tools must be disabled. Type "about:policies" in the browser window. If "DisableDeveloperTools" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000016 Firefox must have the DoW root certificates installed. Type "about:preferences#privacy" in the browser window. Scroll down to the bottom and select "View Certificates...". In the Certificate Manager window, select the "Authorities" tab. Scroll through the Certificate Name list to the U.S. Gover
FFOX-00-000017 Firefox must be configured to not delete data upon shutdown. Type "about:policies" in the browser address bar. If "SanitizeOnShutdown" is not displayed under Policy Name or the Policy Value does not have {"Cache":false,"Cookies":false,"Downloads":false,"FormData":false,"Sessions":false,"History":fals
FFOX-00-000018 Firefox must prevent the user from quickly deleting data. Enter "about:policies" in the browser address bar. If "DisableForgetButton" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000019 Firefox private browsing must be disabled. Type "about:policies" in the browser window. If "DisablePrivateBrowsing" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000020 Firefox search suggestions must be disabled. Type "about:policies" in the browser window. If "SearchSuggestEnabled" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.
FFOX-00-000021 Firefox autoplay must be disabled. Type "about:policies" in the browser address bar. If "Permissions" is not displayed under Policy Name or the Policy Value is not "Autoplay" with a value of "Default" and "Block-audio-video", this is a finding.
FFOX-00-000022 Firefox network prediction must be disabled. Type "about:policies" in the browser window. If "NetworkPrediction" is not displayed under Policy Name or the Policy Value is not "false", this is a finding.
FFOX-00-000023 Firefox fingerprinting protection must be enabled. Type "about:policies" in the browser address bar. If "EnableTrackingProtection" is not displayed under Policy Name or the Policy Value is not "Fingerprinting" with a value of "true", this is a finding.
FFOX-00-000024 Firefox cryptomining protection must be enabled. Type "about:policies" in the browser address bar. If "EnableTrackingProtection" is not displayed under Policy Name or the Policy Value is not "Cryptomining" with a value of "true", this is a finding.
FFOX-00-000025 Firefox Enhanced Tracking Protection must be enabled. Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name or the Policy Value does not include "browser.contentblocking.category" with a value of "strict" and status of "locked", this is a finding
FFOX-00-000026 Firefox extension recommendations must be disabled. Type "about:policies" in the browser address bar. If "Preferences" is not displayed under Policy Name and the Policy Value does not include "extensions.htmlaboutaddons.recommendations.enabled" with a value of "false" and status of "locked",
FFOX-00-000027 Firefox deprecated ciphers must be disabled. Type "about:policies" in the browser address bar. If "DisabledCiphers" is not displayed under Policy Name or the Policy Value is not "TLS_RSA_WITH_3DES_EDE_CBC_SHA" with a value of "true", this is a finding.
FFOX-00-000028 Firefox must not recommend extensions as the user is using the browser. Type "about:policies" in the browser address bar. If "UserMessaging" is not displayed under Policy Name or the Policy Value is not "ExtensionRecommendations" with a value of "false", this is a finding.
FFOX-00-000029 The Firefox New Tab page must not show Top Sites, Sponsored Top Sites, Pocket Recommendations, Sponsored Pocket Stories, Searches, Highlights, or Snippets. Type "about:policies" in the browser address bar. If "FirefoxHome" is not displayed under Policy Name or the Policy Value does not have "Search" with a value of "false", this is a finding. If "FirefoxHome" is not displayed under Policy Name
FFOX-00-000033 Firefox must be configured so that DNS over HTTPS is disabled. Type "about:policies" in the browser address bar. If "DNSOverHTTPS" is not displayed under Policy Name or the Policy Value does not have "Enabled" with a value of "false", this is a finding.
FFOX-00-000034 Firefox accounts must be disabled. Type "about:policies" in the browser address bar. If "DisableFirefoxAccounts" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000036 Firefox feedback reporting must be disabled. Type "about:policies" in the browser address bar. If "DisableFeedbackCommands" is not displayed under Policy Name or the Policy Value is not "true", this is a finding.
FFOX-00-000037 Firefox encrypted media extensions must be disabled. Type "about:policies" in the browser address bar. If "EncryptedMediaExtensions" is not displayed under Policy Name or the Policy Value does not have "Enabled" set to "false" or the Policy Value does not have "Locked" set to "true", this is
FFOX-00-000039 Firefox Studies must be disabled. Type "about:policies" in the browser address bar. If "DisableFirefoxStudies" is not displayed under Policy Name or the Policy Value does not have a value of "true", this is a finding.

33 of 33.