STIGQter: STIG Summary: Microsoft Edge Security Technical Implementation Guide Version: 2 Release: 5 Benchmark Date: 01 Apr 2026:

User control of proxy settings must be disabled.

DISA Rule

SV-235719r1156558_rule

Vulnerability Number

V-235719

Group Title

SRG-APP-000039

Rule Version

EDGE-00-000001

Severity

CAT III

CCI(s)

• CCI-001414 - Enforce approved authorizations for controlling the flow of information between connected systems based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Proxy server/Proxy Settings" to "Enabled" and define a value for "ProxyMode".

"ProxyMode" must be defined and set to one of the following: "direct", "system", "auto_detect", "fixed_servers", or "pac_script".

Consult Microsoft documentation for proper configuration of the text string required to define the "Proxy Settings" value.

Example: {"ProxyMode": "fixed_servers", "ProxyServer": "127.0.0.1:8080"}

"ProxyPacUrl", "ProxyServer", or "ProxyBypassList" are optional.

Check Contents

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Proxy server/Proxy Settings" must be "Enabled", and have a "Proxy Settings" value defined for "ProxyMode".

"ProxyMode" must be defined and set to one of the following: "direct", "system", "auto_detect", "fixed_servers", or "pac_script".

Consult Microsoft documentation for proper configuration of the text string required to define the "Proxy Settings" value.

Example: {"ProxyMode": "fixed_servers", "ProxyServer": "123.123.123.123:8080"}

Values for "ProxyPacUrl", "ProxyServer", or "ProxyBypassList" are optional.

Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge

If the REG_SZ value for "ProxySettings" does not have "ProxyMode" configured, this is a finding.

Vulnerability Number

V-235719

Documentable

False

Rule Version

EDGE-00-000001

Severity Override Guidance

The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Proxy server/Proxy Settings" must be "Enabled", and have a "Proxy Settings" value defined for "ProxyMode".

"ProxyMode" must be defined and set to one of the following: "direct", "system", "auto_detect", "fixed_servers", or "pac_script".

Consult Microsoft documentation for proper configuration of the text string required to define the "Proxy Settings" value.

Example: {"ProxyMode": "fixed_servers", "ProxyServer": "123.123.123.123:8080"}

Values for "ProxyPacUrl", "ProxyServer", or "ProxyBypassList" are optional.

Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge

If the REG_SZ value for "ProxySettings" does not have "ProxyMode" configured, this is a finding.

Check Content Reference

M

Target Key

5280