V-235719
SV-235719r1156558_rule
CAT III
User control of proxy settings must be disabled.
From: Microsoft Edge Security Technical Implementation Guide (V2R5)
Description
<VulnDiscussion>This action configures the proxy settings for Microsoft Edge.
If this policy is enabled, Microsoft Edge ignores all proxy-related options specified from the command line.
If this policy is not configured, users can choose their own proxy settings.
This policy overrides the following individual policies:
- ProxyMode.
- ProxyPacUrl.
- ProxyServer.
- ProxyBypassList.
Setting the ProxySettings policy accepts the following fields:
- ProxyMode, which allows for the proxy server used by Microsoft Edge to be specified and prevents users from changing proxy settings.
- ProxyPacUrl, a URL to a proxy .pac file.
- ProxyServer, a URL for the proxy server.
- ProxyBypassList, a list of proxy hosts that Microsoft Edge bypasses.
For ProxyMode, the following values have the noted impact:
- direct, a proxy is never used and all other fields are ignored.
- system, the system's proxy is used and all other fields are ignored.
- auto_detect, all other fields are ignored.
- fixed_servers, the ProxyServer and ProxyBypassList fields are used.
- pac_script, the ProxyPacUrl and ProxyBypassList fields are used.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
Check Procedure
The policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Proxy server/Proxy Settings" must be "Enabled", and have a "Proxy Settings" value defined for "ProxyMode".
"ProxyMode" must be defined and set to one of the following: "direct", "system", "auto_detect", "fixed_servers", or "pac_script".
Consult Microsoft documentation for proper configuration of the text string required to define the "Proxy Settings" value.
Example: {"ProxyMode": "fixed_servers", "ProxyServer": "123.123.123.123:8080"}
Values for "ProxyPacUrl", "ProxyServer", or "ProxyBypassList" are optional.
Use the Windows Registry Editor to navigate to the following key:
HKLM\SOFTWARE\Policies\Microsoft\Edge
If the REG_SZ value for "ProxySettings" does not have "ProxyMode" configured, this is a finding.
Fix Text
Set the policy value for "Computer Configuration/Administrative Templates/Microsoft Edge/Proxy server/Proxy Settings" to "Enabled" and define a value for "ProxyMode".
"ProxyMode" must be defined and set to one of the following: "direct", "system", "auto_detect", "fixed_servers", or "pac_script".
Consult Microsoft documentation for proper configuration of the text string required to define the "Proxy Settings" value.
Example: {"ProxyMode": "fixed_servers", "ProxyServer": "127.0.0.1:8080"}
"ProxyPacUrl", "ProxyServer", or "ProxyBypassList" are optional.
CCI Reference
CCI-001414- Created
- 2026-01-14 17:55:45
- Last Updated
- 2026-04-07 20:08:23