BaselineWatch
3 STIGs
Desk
Your fleet and your work Fleetyour releases and the hardware they run onTriagewhat needs a decisionWatchlistthe products and platforms you runSaved searchesthe lists you come back to
This instance Sourceswhat is read, how often, under what termsDigestthe daily or weekly summary, and alerts
How it is drawn Appearancethe look and the colour schemeBrandingthe mark this instance wears
Owner sign-in

Browsers STIGs

3 STIGs followed · All platforms
All 33 CAT I 2CAT II 29CAT III 2 Browse in the Register

CAT I 2

Any vulnerability, the exploitation of which will directly and immediately result in loss of confidentiality, availability or integrity.

  1. FFOX-00-000001 CAT I V-251545 · SRG-APP-000456

    The installed version of Firefox must be supported.

    Maps to SI-2 via CCI-002605
    Check

    Run Firefox. Click the ellipsis button >> Help >> About Firefox, and view the version number. If the Firefox version is not a supported version, this is a finding.

    Fix

    Upgrade the version of the browser to an approved version by obtaining software from the vendor or other trusted source.

  2. FFOX-00-000002 CAT I V-251546 · SRG-APP-000560

    Firefox must be configured to allow only TLS 1.2 or above.

    Maps to AC-17(2) via CCI-001453
    Check

    Type "about:policies" in the browser window. If "SSLVersionMin" is not displayed under Policy Name or the Policy Value is not "tls1.2" or "tls1.3", this is a finding.

    Fix

    Windows group policy: 1. Open the group policy editor tool with "gpedit.msc". 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Mozilla\Firefox\ Policy Name: Minimum SSL version enabled Policy State: Enabled Policy Value: TLS 1.2 (or TLS 1.3) macOS "plist" file: Add the following: SSLVersionMin tls1.2 (or tls1.3) Linux "policies.json" file: Add the following in the policies section: "SSLVersionMin": "tls1.2" or ("SSLVersionMin": "tls1.3")