Verifies that SQL Server is running with a security Certificate

The OVAL Repository 5.10 2015-09-03T08:25:00.611-04:00 Verifies that SQL Server is running with a security Certificate Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to insure that SQL Server has a security certicate. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies no Floppy Drives are installed Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to prevent data being transfered off secured machines via floppy drives. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies there are no sharing of resources Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to prevent data being transfered off secured machines via a share. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies that Anitvirus is installed Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This checks if an antivirus is installed. NON-WMI Complaint products needs to be manually added as ORs Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies no USB Drives are installed Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2 This is intended to prevent data being transfered off secured machines via USB (thumb) drives. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies that Firewall is installed Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This checks if a firewall is installed. NON-WMI Complaint products needs to be manually added as ORs Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies there are no accounts that do not have expiring passwords or no passwords Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to insure that passwords are required and changed regularly. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies that Web Client Service is disabled Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to insure that Web Client Service is disabled on appropriate machines, for example secured database servers. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies no Infrared devices are installed Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to prevent data being transfered off secured machines via infrared connections. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Verifies no wireless adapters are installed Microsoft Windows Vista Microsoft Windows XP Works on any Windows platform after Windows XP SP2. This is intended to prevent data being transfered off secured machines via wireless connections. Ken Lassesen DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: KSN is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: KSN is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: File monitoring is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: File monitoring is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: System Watcher is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: System Watcher is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Application StartUp Control is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Application StartUp Control is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Network Attack Blocker is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Network Attack Blocker is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Mail monitoring is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Mail monitoring is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: IM monitoring is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: IM monitoring is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Proactive Defence is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Proactive Defence is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Web monitoring is enabled Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Server 2003 Microsoft Windows XP Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Web monitoring is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED Maria Kedovskaya INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Vulnerability Monitor is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Vulnerability Monitor is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Web Control is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Web Control is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Device Control is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Device Control is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Advanced Disinfection technology is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Advanced Disinfection technology is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Application Privilege Control is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Application Privilege Control is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8: Firewall is enabled Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8: Firewall is enabled. Sergey Artykhov DRAFT INTERIM ACCEPTED ACCEPTED Kaspersky Endpoint Security 8 is installed Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Kaspersky Endpoint Security 8 Kaspersky Endpoint Security 8 is installed. Sergey Artykhov DRAFT Sergey Artykhov INTERIM ACCEPTED ACCEPTED Clear SSL Form Session Data Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox This will ensure that the form data stored in an SSL Secure session is cleared when the session ends. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disabling Auto-Install of Add-Ons Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox ensure that no website is allowed to automatically install Add-Ons. Also, it will list how to ensure that proper notifications are shown when installing Add-Ons. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Sending LM Hash Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Firefox from sending an LM Hash when authenticating to resources that request this authentication type. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Auto Notification of Outdated Plugins Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox This feature automatically detects when installed Plugins are out of date and notifies the users to update the Plugins. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Blocking of Reported Attack Sites Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox This configuration will have Firefox check whether the site being visited may be an attempt to interfere with normal computer functions or send personal data to unauthorized parties over the Internet. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disallow JavaScript s Ability to Hide the Status Bar Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent JavaScript from changing the Status Bar from showing the location of the content when a user visits a link or when content is being downloaded on a web page. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Block Pop-up Windows Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox The Pop-up Blocker is used to block Pop-ups which a website might open with or without any user interaction. These Pop-Ups can be used to open un-trusted malicious content. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Information Bar for Outdated Plugins Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox This feature automatically shows an information bar when installed Plugins are out of date and notifies the users to update the Plugins. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Remember Search and Form History Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent search and form history from being stored. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable SSPI Authentication Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can be configured to leverage the Microsoft Windows Security Support Provider Interface (SSPI). Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disallow Credential Storage Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Firefox from storing credentials for certain websites. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Virus Scanning for Downloads Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can be configured to scan downloads for viruses. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Warning When Entering Insecure Site Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can notify users when a user enters an insecure (non-SSL) site from an encrypted SSL site. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Prompting for Credential Storage Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Firefox from prompting when credentials are entered in website forms so credentials cannot be stored. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Javascript Function to Move or Resize Existing Windows Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Javasript from moving or resizing existing windows. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Javascript Functions to Raise or Lower Windows Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Javascript from raising or lowering windows Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Displaying Javascript in History URLs Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox This will ensure that JavaScript URLs are not displayed in the history bar. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Always Ask Where to Save Files Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox should prompt for a location to save files every time. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Downloading on Desktop Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can download content on the desktop or other locations. It is recommended not to download files on desktop. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Warning of Loading Mixed Content Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Warn users when unencrypted data is loaded in an SSL encrypted session. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Accept Only 1st Party Cookies Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Cookies are used to track valid session on internet websites. Securing cookie handling will help secure a user s browser session. It is recommended to only accept 1st party cookies. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Javascript Functions Disable or Replace Context Menus Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Javascript from disabling or replacing context menus Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Caching of SSL Pages Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Firefox from locally caching the content of SSL pages on disk. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Auto Update Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Enable updates for Firefox and extensions installed on Firefox. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Javascript Functions to Hide the Status Bar Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Javascript from hiding the status bar Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Warn When Sites Try to Install Add-ons Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Will warn user when a site tries to install an add-on Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Delete Download History Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Delete Download History Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Delete Search and Form History Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Delete Search and Form History Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Closing of Windows via Scripts Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can be configured to prevent script from closing browser windows. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Referer from an SSL Website Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can be configured to omit the HTTP Referer header when the referring site is protected by SSL. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Javascript Functions to Change Status Bar Text Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Javascript from changing the status bar Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Online Certificate Status Protocol Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox checks with Online Certification Status Protocol (OCSP) to ensure that the certificates are valid. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Java Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Disable Java in Firefox Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disable Scripting of Plugins by JavaScript Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Javascript from initiating and interacting with the Plug-ins installed in Firefox. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Blocking of Reported Web Forgeries Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox TThis configuration will have Firefox actively check whether the site being visited may be an attempt to mislead you into providing personal information (this is often referred to as phishing). Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Ask About Cookies Every Time Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prompt user for permission to use a cookie. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Warning When Submitting Clear Text Form Data Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Firefox can notify users when a user sends form data to an insecure (non-SSL) site. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable Warning of Using Weak Encryption Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Warn users when a website is using weaker encryption. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Delete History and Form Data Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent Firefox from storing the sites visited, information typed in forms, and downloads from Internet resources. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Disallow JavaScript s Ability to Change the Status Bar Text Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Prevent JavaScript from changing the Status Bar when showing the location of the content when a user hovers of a hyperlink, a user visits a link, or when content is being downloaded on a web page. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Enable SSL 3.0 and TLS 1.0 Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox Enable Transport Layer Security for Firefox. Michael A. Logoyda DRAFT Jonathan Baker INTERIM ACCEPTED Shane Shaffer INTERIM ACCEPTED Chandan S INTERIM ACCEPTED ACCEPTED Mozilla Firefox is installed Microsoft Windows 2000 Microsoft Windows XP Microsoft Windows Server 2003 Microsoft Windows Server 2008 Microsoft Windows Server 2008 R2 Microsoft Windows Vista Microsoft Windows 7 Microsoft Windows 8 Microsoft Windows Server 2012 Mozilla Firefox The browser installed on the system is Mozilla Firefox Prabhu S A DRAFT INTERIM ACCEPTED J. Daniel Brown INTERIM ACCEPTED Bhavya K INTERIM Dragos Prisaca ACCEPTED Sergey Artykhov INTERIM Sergey Artykhov ACCEPTED Shane Shaffer INTERIM ACCEPTED Maria Mikhno INTERIM ACCEPTED ACCEPTED