untangling_the_web

DID: 4046925
UNCLASSIFIEOhTOR OFfiCIAL liSE ONLY
• Downloads
o File Download [Enable]
o Font Download [Prompt]
• Microsoft VM
o Java permissions [High Safety]
• Miscellaneous
o
o
o
o
o
o
o
o
o
o
o
• Scripting
o
Access data sources across domains [Disable]
Allow META REFRESH [Enable]
Display mixed content [Prompt]
Don't prompt for client certificate selection ... [Disable]
Drag and drop or copy and paste files [Enable or Prompt]
Installation of desktop items [Disable]
Launching programs and files in an IFRAME [Disable]
Navigate sub-frames across different domains [Enable or Prompt]
Software channel permissions [High Safety]
Submit nonencrypted form data [Enable]
Userdata persistence [Disable]
Active scripting [Disable]
o Allow paste operations via script [Disable]
o Scripting of Java applets [Disable]
• User Authentication: Automatic logon only in Intranet zone
As a general rule, do not rely upon sliders to determine your security settings. These
settings will affect your browsing. Some websites require ActiveX or scripting. If you
want to run ActiveX or scripts on any website, you can either turn this feature on
temporarily or add the site to the Trusted sites zone, though I would be very, very
careful about which sites you add.
You can add Web sites by selecting the Trusted sites icon, and pressing the Sites
button. The default setting only lets you add secure sites (sites using https);
however, if you uncheck the Require server verification (https:) for all sites in
this zone, you can add any site.
528 UNCLASSIFIEOIIFOR OFFICIAL I::JSE ONLY