| Vuln ID | Severity | Asset | STIG | Title | Status | Doc Status | Assigned To | Actions |
|---|---|---|---|---|---|---|---|---|
| V-250540 | CAT II | MONT-VSF-004 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-004/Checklist/MONT-VSF-004_IE11_V2R5_20251023-143737.ckl
Scan Date: 2026-01-14T12:57:29.593425
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-VSF-003 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-VSF-003/Checklist/MONT-VSF-003_IE11_V2R5_20251023-143759.ckl
Scan Date: 2026-01-14T12:57:31.028003
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-MB-002 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-MB-002/Checklist/MONT-MB-002_IE11_V2R5_20251023-152627.ckl
Scan Date: 2026-01-14T12:57:32.457862
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-DP-001 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-DP-001/Checklist/MONT-DP-001_IE11_V2R5_20251023-143936.ckl
Scan Date: 2026-01-14T12:57:34.785380
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-DC-003 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-DC-003/Checklist/MONT-DC-003_IE11_V2R5_20251023-172012.ckl
Scan Date: 2026-01-14T12:57:36.769737
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-DB-002 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-DB-002/Checklist/MONT-DB-002_IE11_V2R5_20251023-143958.ckl
Scan Date: 2026-01-14T12:57:38.608653
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-BE-002 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-BE-002/Checklist/MONT-BE-002_IE11_V2R5_20251023-143812.ckl
Scan Date: 2026-01-14T12:57:39.956221
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-AP-002 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2507.5 (Scan-IE11_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: _Reviewed/MONT-AP-002/Checklist/MONT-AP-002_IE11_V2R5_20251023-144037.ckl
Scan Date: 2026-01-14T12:57:42.261670
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-SW-89108 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: MONT-SW-89108_IE11_V2R5_20251217-202849.ckl
Scan Date: 2026-03-04T15:25:15.947087
Technology Area: Windows Operating System
|
||||||||
| V-250540 | CAT II | MONT-SW-89134 | Microsoft Internet Explorer 11 Security ... | Turn off Encryption Support must be enabled. | - | |||
Check TextThe policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" must be "Enabled". Verify the only option selected is "Only use TLS 1.2" from the drop-down box. Procedure: Use the Windows Registry Editor to navigate to the following key: HKLM\Software\Policies\Microsoft\Windows\CurrentVersion\Internet Settings!SecureProtocols. Criteria: If the value for "SecureProtocols" is not REG_DWORD = "2048", this is a finding. Fix TextSet the policy value for Computer Configuration >> Administrative Templates >> Windows Components >> Internet Explorer >> Internet Control Panel >> Advanced Page >> "Turn off Encryption Support" to "Enabled". Select only "Only use TLS 1.2" from the drop-down box. Finding DetailsEvaluate-STIG 1.2510.0 (Scan-IE11_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2C7C6F3D3708588F52419C6810AACAEA4CE9F30B ~~~~~ 'Turn off Encryption Support' is Enabled: (Use TLS1.1, Use TLS 1.2) Registry Path: HKLM:\SOFTWARE\Policies\Microsoft\Windows\CurrentVersion\Internet Settings Value Name: SecureProtocols Value: 0x00000800 (2048) Type: REG_DWORD
Source: MONT-SW-89134_IE11_V2R5_20251217-201035.ckl
Scan Date: 2026-03-04T15:25:41.971891
Technology Area: Windows Operating System
|
||||||||