USNS MONTFORD POINT - Findings

V-275780 CAT II Create Themes with AI must be disabled.

4 assets 4 Open Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 030095F2C704F9953395356EDF1505802B21545B ~~~~~ 'Generative AI' is NOT Enabled: (Do not allow Create Themes) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CreateThemesSettings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 030095F2C704F9953395356EDF1505802B21545B ~~~~~ 'Generative AI' is NOT Enabled: (Do not allow Create Themes) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CreateThemesSettings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 030095F2C704F9953395356EDF1505802B21545B ~~~~~ 'Generative AI' is NOT Enabled: (Do not allow Create Themes) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CreateThemesSettings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 030095F2C704F9953395356EDF1505802B21545B ~~~~~ 'Generative AI' is NOT Enabled: (Do not allow Create Themes) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CreateThemesSettings (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "CreateThemesSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "CreateThemesSettings" value name does not exist or its value data is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI Policy Name: Settings for Create Themes with AI Policy State: Enabled Policy Value: Do not allow Create Themes

V-275781 CAT II DevTools Generative AI features must be disabled.

4 assets 4 Open Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 0315F4406C97D117822450C5FD984BFED7773393 ~~~~~ 'Settings for DevTools Generative AI Features' is NOT Enabled: (Do not allow DevTools Generative AI Features) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DevToolsGenAiSettings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 0315F4406C97D117822450C5FD984BFED7773393 ~~~~~ 'Settings for DevTools Generative AI Features' is NOT Enabled: (Do not allow DevTools Generative AI Features) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DevToolsGenAiSettings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 0315F4406C97D117822450C5FD984BFED7773393 ~~~~~ 'Settings for DevTools Generative AI Features' is NOT Enabled: (Do not allow DevTools Generative AI Features) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DevToolsGenAiSettings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 0315F4406C97D117822450C5FD984BFED7773393 ~~~~~ 'Settings for DevTools Generative AI Features' is NOT Enabled: (Do not allow DevTools Generative AI Features) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DevToolsGenAiSettings (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "DevToolsGenAiSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "DevToolsGenAiSettings" value name does not exist or its value data is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI Policy Name: Settings for DevTools Generative AI Features Policy State: Enabled Policy Value: Do not allow DevTools Generative AI Features

V-275782 CAT II GenAI local foundational model must be disabled.

4 assets 4 Open Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: AB0429249D5824A95A4B689E7D91D5A20E45FB61 ~~~~~ 'Settings for GenAI local foundational model' is NOT Enabled: (Do not download model) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: GenAILocalFoundationalModelSettings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: AB0429249D5824A95A4B689E7D91D5A20E45FB61 ~~~~~ 'Settings for GenAI local foundational model' is NOT Enabled: (Do not download model) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: GenAILocalFoundationalModelSettings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: AB0429249D5824A95A4B689E7D91D5A20E45FB61 ~~~~~ 'Settings for GenAI local foundational model' is NOT Enabled: (Do not download model) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: GenAILocalFoundationalModelSettings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: AB0429249D5824A95A4B689E7D91D5A20E45FB61 ~~~~~ 'Settings for GenAI local foundational model' is NOT Enabled: (Do not download model) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: GenAILocalFoundationalModelSettings (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "GenAILocalFoundationalModelSettings" is not displayed under the "Policy Name" column or it is not set to "1" under the "Policy Value" column, this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "GenAILocalFoundationalModelSettings" value name does not exist or its value data is not set to "1", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI Policy Name: Settings for GenAI local foundational model Policy State: Enabled Policy Value: Do not download model

V-275783 CAT II Help Me Write must be disabled.

4 assets 4 Open Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 6FBF401494667F427807D389332943ACAEC62015 ~~~~~ 'Settings forSettings for Help Me Write' is NOT Enabled: (Do not allow Help Me Write) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HelpMeWriteSettings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 6FBF401494667F427807D389332943ACAEC62015 ~~~~~ 'Settings forSettings for Help Me Write' is NOT Enabled: (Do not allow Help Me Write) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HelpMeWriteSettings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 6FBF401494667F427807D389332943ACAEC62015 ~~~~~ 'Settings forSettings for Help Me Write' is NOT Enabled: (Do not allow Help Me Write) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HelpMeWriteSettings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 6FBF401494667F427807D389332943ACAEC62015 ~~~~~ 'Settings forSettings for Help Me Write' is NOT Enabled: (Do not allow Help Me Write) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HelpMeWriteSettings (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "HelpMeWriteSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "HelpMeWriteSettings" value name does not exist or its value data is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI Policy Name: Settings forSettings for Help Me Write Policy State: Enabled Policy Value: Do not allow Help Me Write

V-275784 CAT II AI-powered History Search must be disabled.

4 assets 4 Open Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 82159A5C7B7BBE8553740194834F08EFBC052DBF ~~~~~ 'Settings for AI-powered History Search' is NOT Enabled: (Do not allow AI History Search) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HistorySearchSettings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 82159A5C7B7BBE8553740194834F08EFBC052DBF ~~~~~ 'Settings for AI-powered History Search' is NOT Enabled: (Do not allow AI History Search) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HistorySearchSettings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 82159A5C7B7BBE8553740194834F08EFBC052DBF ~~~~~ 'Settings for AI-powered History Search' is NOT Enabled: (Do not allow AI History Search) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HistorySearchSettings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 82159A5C7B7BBE8553740194834F08EFBC052DBF ~~~~~ 'Settings for AI-powered History Search' is NOT Enabled: (Do not allow AI History Search) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: HistorySearchSettings (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "HistorySearchSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "HistorySearchSettings" value name does not exist or its value data is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI Policy Name: Settings for AI-powered History Search Policy State: Enabled Policy Value: Do not allow AI History Search

V-275785 CAT II Tab Compare Settings must be disabled.

4 assets 4 Open Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 622EB36F17F9B80BD6A6F35FE7118CC514DB5D40 ~~~~~ 'Tab Compare settings' is NOT Enabled: (Do not allow Tab Compare) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: TabCompareSettings (Not found) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be OPEN on 12/17/2025 ResultHash: 622EB36F17F9B80BD6A6F35FE7118CC514DB5D40 ~~~~~ 'Tab Compare settings' is NOT Enabled: (Do not allow Tab Compare) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: TabCompareSettings (Not found) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 622EB36F17F9B80BD6A6F35FE7118CC514DB5D40 ~~~~~ 'Tab Compare settings' is NOT Enabled: (Do not allow Tab Compare) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: TabCompareSettings (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: 622EB36F17F9B80BD6A6F35FE7118CC514DB5D40 ~~~~~ 'Tab Compare settings' is NOT Enabled: (Do not allow Tab Compare) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: TabCompareSettings (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "TabCompareSettings" is not displayed under the "Policy Name" column or it is not set to "2" under the "Policy Value" column, this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "TabCompareSettings" value name does not exist or its value data is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Generative AI Policy Name: Tab Compare settings Policy State: Enabled Policy Value: Do not allow Tab Compare

V-245539 CAT II Session only based cookies must be enabled.

4 assets 2 Open 2 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E363196E99D0B54068C1D0F8236AD12F02B91AAC ~~~~~ 'Default cookies setting' is Enabled: (Keep cookies for the duration of the session) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultCookiesSetting Value: 0x00000004 (4) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: E363196E99D0B54068C1D0F8236AD12F02B91AAC ~~~~~ 'Default cookies setting' is Enabled: (Keep cookies for the duration of the session) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultCookiesSetting Value: 0x00000004 (4) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: B42979BE5A28F62E82EA83D59BC26834CCCB8E3B ~~~~~ 'Default cookies setting' is NOT Enabled: (Keep cookies for the duration of the session) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultCookiesSetting (Not found) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be OPEN on 10/23/2025 ResultHash: B42979BE5A28F62E82EA83D59BC26834CCCB8E3B ~~~~~ 'Default cookies setting' is NOT Enabled: (Keep cookies for the duration of the session) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultCookiesSetting (Not found) Comments

Check Text

Universal method: 1. In the omnibox (address bar), type chrome://policy 2. If the policy "DefaultCookiesSetting" is not shown or is not set to "4", this is a finding. Windows method: 1. Start regedit. 2. Navigate to HKLM\Software\Policies\Google\Chrome\DefaultCookiesSetting. 3. If this key does not exist, or is not set to "4", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings. - Policy Name: Default cookies setting - Policy State: Enabled - Policy Value: Keep cookies for the duration of the session

V-221558 CAT II Firewall traversal from remote host must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B6AA552093C875CFBF6E0F8C4BAA73C928D1447E ~~~~~ 'Enable firewall traversal from remote access host' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: RemoteAccessHostFirewallTraversal Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B6AA552093C875CFBF6E0F8C4BAA73C928D1447E ~~~~~ 'Enable firewall traversal from remote access host' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: RemoteAccessHostFirewallTraversal Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B6AA552093C875CFBF6E0F8C4BAA73C928D1447E ~~~~~ 'Enable firewall traversal from remote access host' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: RemoteAccessHostFirewallTraversal Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B6AA552093C875CFBF6E0F8C4BAA73C928D1447E ~~~~~ 'Enable firewall traversal from remote access host' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: RemoteAccessHostFirewallTraversal Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If RemoteAccessHostFirewallTraversal is not displayed under the Policy Name column or it is not set to false under the Policy Value column, then this is a finding. Windows registry: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the RemoteAccessHostFirewallTraversal value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative\Templates\Google\Google Chrome\Remote Access Policy Name: Enable firewall traversal from remote access host Policy State: Disabled Policy Value: N/A

V-221559 CAT II Site tracking users location must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A13562B6341A89B3C907EB231590C9B48A11B3D1 ~~~~~ 'Default geolocation setting' is Enabled: (Do not allow any site to track the users' physical location) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultGeolocationSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A13562B6341A89B3C907EB231590C9B48A11B3D1 ~~~~~ 'Default geolocation setting' is Enabled: (Do not allow any site to track the users' physical location) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultGeolocationSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A13562B6341A89B3C907EB231590C9B48A11B3D1 ~~~~~ 'Default geolocation setting' is Enabled: (Do not allow any site to track the users' physical location) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultGeolocationSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A13562B6341A89B3C907EB231590C9B48A11B3D1 ~~~~~ 'Default geolocation setting' is Enabled: (Do not allow any site to track the users' physical location) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultGeolocationSetting Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If DefaultGeolocationSetting is not displayed under the Policy Name column or it is not set to 2, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DefaultGeolocationSetting value name does not exist or its value data is not set to 2, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings\ Policy Name: Default geolocation setting Policy State: Enabled Policy Value: Do not allow any site to track the users' physical location

V-221561 CAT II Sites ability to show pop-ups must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7CA6D59CDB675C21DAED1DE671FBBE58300ECDC8 ~~~~~ 'Default popups setting' is Enabled: (Do not allow any site to show popups) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultPopupsSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7CA6D59CDB675C21DAED1DE671FBBE58300ECDC8 ~~~~~ 'Default popups setting' is Enabled: (Do not allow any site to show popups) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultPopupsSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7CA6D59CDB675C21DAED1DE671FBBE58300ECDC8 ~~~~~ 'Default popups setting' is Enabled: (Do not allow any site to show popups) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultPopupsSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7CA6D59CDB675C21DAED1DE671FBBE58300ECDC8 ~~~~~ 'Default popups setting' is Enabled: (Do not allow any site to show popups) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultPopupsSetting Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If DefaultPopupsSetting is not displayed under the Policy Name column or it is not set to 2, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the value name DefaultPopupsSetting does not exist or its value data is not set to 2, then this is a finding. Note: If AO Approved exceptions to this rule have been enabled, this is not a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings\ Policy Name: Default popups setting Policy State: Enabled Policy Value: Do not allow any site to show popups

V-221562 CAT II Extensions installation must be blocklisted by default.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 8F9ED6BB4A138CBF0E8EEEAFF95ACDE3476CCA81 ~~~~~ 'Configure extension installation blocklist' is Enabled: () Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist Value Name: 1 Value: Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 8F9ED6BB4A138CBF0E8EEEAFF95ACDE3476CCA81 ~~~~~ 'Configure extension installation blocklist' is Enabled: () Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist Value Name: 1 Value: Type: REG_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8F9ED6BB4A138CBF0E8EEEAFF95ACDE3476CCA81 ~~~~~ 'Configure extension installation blocklist' is Enabled: () Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist Value Name: 1 Value: Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 8F9ED6BB4A138CBF0E8EEEAFF95ACDE3476CCA81 ~~~~~ 'Configure extension installation blocklist' is Enabled: () Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallBlocklist Value Name: 1 Value: Type: REG_SZ Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If ExtensionInstallBlocklist is not displayed under the Policy Name column or it is not set to * under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ExtensionInstallBlocklist 3. If the a registry value name of 1 does not exist under that key or its value is not set to *, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Extensions\ Policy Name: Configure extension installation blocklist Policy State: Enabled Policy Value: *

V-221564 CAT II The default search providers name must be set.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BA250C98703E598AD8EE6E27C5EB161E00EC8F8D ~~~~~ 'Default search provider name' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderName Value: Google Encrypted Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BA250C98703E598AD8EE6E27C5EB161E00EC8F8D ~~~~~ 'Default search provider name' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderName Value: Google Encrypted Type: REG_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BA250C98703E598AD8EE6E27C5EB161E00EC8F8D ~~~~~ 'Default search provider name' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderName Value: Google Encrypted Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BA250C98703E598AD8EE6E27C5EB161E00EC8F8D ~~~~~ 'Default search provider name' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderName Value: Google Encrypted Type: REG_SZ Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If DefaultSearchProviderName is displayed under the Policy Name column or it is not set to an organization approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008(ex. Google Encrypted, Bing Encrypted) under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DefaultSearchProviderName value name does not exist or it is not set to an organization approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008(ex. Google Encrypted, Bing Encrypted), then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Default search provider\ Policy Name: Default search provider name Policy State: Enabled Policy Value: set to an organization approved encrypted search provider that corresponds to the encrypted search provider set in DTBC-0008(ex. Google Encrypted, Bing Encrypted)

V-221565 CAT II The default search provider URL must be set to perform encry...

4 assets 2 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4E2A308B8138082CBCDE899BDC5B493E0085A6E2 ~~~~~ 'Default search provider search URL' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderSearchURL Value: https://www.google.com/search?q={searchTerms} Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 4E2A308B8138082CBCDE899BDC5B493E0085A6E2 ~~~~~ 'Default search provider search URL' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderSearchURL Value: https://www.google.com/search?q={searchTerms} Type: REG_SZ Comments

Check Text

If the system is on the SIPRNet, this requirement is NA. Universal method: 1. In the omnibox (address bar) type chrome://policy. 2. If DefaultSearchProviderSearchURL is not displayed under the Policy Name column or it is not set to an organization-approved encrypted search string (ex. https://www.google.com/search?q={searchTerms} or https://www.bing.com/search?q={searchTerms} ) under the Policy Value column, this is a finding. Windows method: 1. Start regedit. 2. Navigate to HKLM\Software\Policies\Google\Chrome\. 3. If the DefaultSearchProviderSearchURL value name does not exist or its value data is not set to an organization-approved encrypted search string (ex. https://www.google.com/search?q={searchTerms} or https://www.bing.com/search?q={searchTerms} ), this is a finding.

Fix Text

If the system is on the SIPRNet, this requirement is NA. Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Default search provider\. - Policy Name: Default search provider search URL - Policy State: Enabled - Policy Value: Must be set to an organization-approved encrypted search string (ex. https://www.google.com/search?q={searchTerms} or https://www.bing.com/search?q={searchTerms} )

V-221566 CAT II Default search provider must be enabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2449380066A51563EDEB3E5E4AC33CFAC8D13C1C ~~~~~ 'Enable the default search provider' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2449380066A51563EDEB3E5E4AC33CFAC8D13C1C ~~~~~ 'Enable the default search provider' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2449380066A51563EDEB3E5E4AC33CFAC8D13C1C ~~~~~ 'Enable the default search provider' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2449380066A51563EDEB3E5E4AC33CFAC8D13C1C ~~~~~ 'Enable the default search provider' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultSearchProviderEnabled Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If DefaultSearchProviderEnabled is not displayed under the Policy Name column or it is not set to true under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DefaultSearchProviderEnabled value name does not exist or its value data is not set to 1, then this is a finding. Note: This policy will only display in the chrome://policy tab on domain joined systems. On standalone systems, the policy will not display.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Default search provider\ Policy Name: Enable the default search provider Policy State: Enabled Policy Value: N/A

V-221567 CAT II The Password Manager must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DB7006051F07865D414129854D8C342B284EDD73 ~~~~~ 'Enable Saving Passwords to the Password Manager' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DB7006051F07865D414129854D8C342B284EDD73 ~~~~~ 'Enable Saving Passwords to the Password Manager' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DB7006051F07865D414129854D8C342B284EDD73 ~~~~~ 'Enable Saving Passwords to the Password Manager' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DB7006051F07865D414129854D8C342B284EDD73 ~~~~~ 'Enable Saving Passwords to the Password Manager' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PasswordManagerEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If PasswordManagerEnabled is not displayed under the Policy Name column or it is not set to false under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the PasswordManagerEnabled value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Password Manager\ Policy Name: Enable Saving Passwords to the Password Manager Policy State: Disabled Policy Value: N/A

V-221570 CAT II Background processing must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FDA40B1CAE77587F47001714CF227FBABCE9246D ~~~~~ 'Continue running background apps when Google Chrome is closed' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BackgroundModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FDA40B1CAE77587F47001714CF227FBABCE9246D ~~~~~ 'Continue running background apps when Google Chrome is closed' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BackgroundModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA40B1CAE77587F47001714CF227FBABCE9246D ~~~~~ 'Continue running background apps when Google Chrome is closed' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BackgroundModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FDA40B1CAE77587F47001714CF227FBABCE9246D ~~~~~ 'Continue running background apps when Google Chrome is closed' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BackgroundModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If BackgroundModeEnabled is not displayed under the Policy Name column and it is not set to false under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the BackgroundModeEnabled value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Continue running background apps when Google Chrome is closed Policy State: Disabled Policy Value: N/A

V-221571 CAT II Google Data Synchronization must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B44660AB12170102BE7D91FAF7781C708BE9E912 ~~~~~ 'Disable synchronization of data with Google' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SyncDisabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: B44660AB12170102BE7D91FAF7781C708BE9E912 ~~~~~ 'Disable synchronization of data with Google' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SyncDisabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B44660AB12170102BE7D91FAF7781C708BE9E912 ~~~~~ 'Disable synchronization of data with Google' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SyncDisabled Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: B44660AB12170102BE7D91FAF7781C708BE9E912 ~~~~~ 'Disable synchronization of data with Google' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SyncDisabled Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If SyncDisabled is not displayed under the Policy Name column or it is not set to true under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the SyncDisabled value name does not exist or its value data is not set to 1, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Disable synchronization of data with Google Policy State: Enabled Policy Value: N/A

V-221572 CAT II The URL protocol schema javascript must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DAEDE8A412B63ACCA5E9A968BCDCD657B7551F62 ~~~~~ 'Block access to a list of URLs' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\URLBlocklist Value Name: 1 Value: javascript://* Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: DAEDE8A412B63ACCA5E9A968BCDCD657B7551F62 ~~~~~ 'Block access to a list of URLs' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\URLBlocklist Value Name: 1 Value: javascript://* Type: REG_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DAEDE8A412B63ACCA5E9A968BCDCD657B7551F62 ~~~~~ 'Block access to a list of URLs' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\URLBlocklist Value Name: 1 Value: javascript://* Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: DAEDE8A412B63ACCA5E9A968BCDCD657B7551F62 ~~~~~ 'Block access to a list of URLs' is Configured Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\URLBlocklist Value Name: 1 Value: javascript://* Type: REG_SZ Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy. 2. If URLBlocklist is not displayed under the Policy Name column or it is not set to javascript://* under the Policy Value column, this is a finding. Windows method: 1. Start regedit. 2. Navigate to HKLM\Software\Policies\Google\Chrome\URLBlocklist. 3. If the URLBlocklist key does not exist, or the does not contain entries 1 set to javascript://*, this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Block access to a list of URLs. - Policy State: Enabled - Policy Value 1: javascript://*

V-221573 CAT II Cloud print sharing must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C3EBC76D9B66FB2901C25ED5B2A7015EE5C81D5A ~~~~~ 'Enable Google Cloud Print proxy' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CloudPrintProxyEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: C3EBC76D9B66FB2901C25ED5B2A7015EE5C81D5A ~~~~~ 'Enable Google Cloud Print proxy' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CloudPrintProxyEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3EBC76D9B66FB2901C25ED5B2A7015EE5C81D5A ~~~~~ 'Enable Google Cloud Print proxy' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CloudPrintProxyEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: C3EBC76D9B66FB2901C25ED5B2A7015EE5C81D5A ~~~~~ 'Enable Google Cloud Print proxy' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: CloudPrintProxyEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If CloudPrintProxyEnabled is not displayed under the Policy Name column or it is not set to false under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the CloudPrintProxyEnabled value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Printing Policy Name: Enable Google Cloud Print proxy Policy State: Disabled Policy Value: N/A

V-221574 CAT II Network prediction must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F28F59977E21D5CF2487D033A4005934219BD961 ~~~~~ 'Enable network prediction' is Enabled: (Do not predict network actions on any network connection) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: NetworkPredictionOptions Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F28F59977E21D5CF2487D033A4005934219BD961 ~~~~~ 'Enable network prediction' is Enabled: (Do not predict network actions on any network connection) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: NetworkPredictionOptions Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F28F59977E21D5CF2487D033A4005934219BD961 ~~~~~ 'Enable network prediction' is Enabled: (Do not predict network actions on any network connection) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: NetworkPredictionOptions Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F28F59977E21D5CF2487D033A4005934219BD961 ~~~~~ 'Enable network prediction' is Enabled: (Do not predict network actions on any network connection) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: NetworkPredictionOptions Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "NetworkPredictionOptions" is not displayed under the “Policy Name” column or it is not set to "2" under the “Policy Value” column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "NetworkPredictionOptions" value name does not exist or its value data is not set to "2," this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable network prediction Policy State: Enabled Policy Value: Do not predict network actions on any network connection

V-221575 CAT II Metrics reporting to Google must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: CA8ED4F4BC7846F4B4393D87D36C6FC87C5AC643 ~~~~~ 'Enable reporting of usage and crash-related data' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: MetricsReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: CA8ED4F4BC7846F4B4393D87D36C6FC87C5AC643 ~~~~~ 'Enable reporting of usage and crash-related data' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: MetricsReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA8ED4F4BC7846F4B4393D87D36C6FC87C5AC643 ~~~~~ 'Enable reporting of usage and crash-related data' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: MetricsReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CA8ED4F4BC7846F4B4393D87D36C6FC87C5AC643 ~~~~~ 'Enable reporting of usage and crash-related data' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: MetricsReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If MetricsReportingEnabled is not displayed under the Policy Name column or it is not set to false under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the MetricsReportingEnabled value name does not exist or its value data is not set to 0, then this is a finding. Note: This policy will only display in the chrome://policy tab on domain joined systems. On standalone systems, the policy will not display.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable reporting of usage and crash-related data Policy State: Disabled Policy Value: N/A

V-221576 CAT II Search suggestions must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 657FEE086E88958B6B8E7A2E631868C52C430528 ~~~~~ 'Enable search suggestions' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 657FEE086E88958B6B8E7A2E631868C52C430528 ~~~~~ 'Enable search suggestions' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 657FEE086E88958B6B8E7A2E631868C52C430528 ~~~~~ 'Enable search suggestions' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 657FEE086E88958B6B8E7A2E631868C52C430528 ~~~~~ 'Enable search suggestions' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SearchSuggestEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If SearchSuggestEnabled is not displayed under the Policy Name column or it is not set to false under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the SearchSuggestEnabled value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable search suggestions Policy State: Disabled Policy Value: N/A

V-221577 CAT II Importing of saved passwords must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FA7D560398330109D81C9DE554DB404B884DF336 ~~~~~ 'Import saved passwords from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportSavedPasswords Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: FA7D560398330109D81C9DE554DB404B884DF336 ~~~~~ 'Import saved passwords from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportSavedPasswords Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FA7D560398330109D81C9DE554DB404B884DF336 ~~~~~ 'Import saved passwords from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportSavedPasswords Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: FA7D560398330109D81C9DE554DB404B884DF336 ~~~~~ 'Import saved passwords from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportSavedPasswords Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If ImportSavedPasswords is not displayed under the Policy Name column or it is not set to false under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the ImportSavedPasswords value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Import saved passwords from default browser on first run Policy State: Disabled Policy Value: N/A

V-221578 CAT II Incognito mode must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0BB5E7ABF3A7506ADDB8445128BFD55CF3075767 ~~~~~ 'Incognito mode availability' is Enabled: (Incognito mode disabled) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: IncognitoModeAvailability Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 0BB5E7ABF3A7506ADDB8445128BFD55CF3075767 ~~~~~ 'Incognito mode availability' is Enabled: (Incognito mode disabled) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: IncognitoModeAvailability Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0BB5E7ABF3A7506ADDB8445128BFD55CF3075767 ~~~~~ 'Incognito mode availability' is Enabled: (Incognito mode disabled) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: IncognitoModeAvailability Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 0BB5E7ABF3A7506ADDB8445128BFD55CF3075767 ~~~~~ 'Incognito mode availability' is Enabled: (Incognito mode disabled) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: IncognitoModeAvailability Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If IncognitoModeAvailability is not displayed under the Policy Name column or it is not set to 1 under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the IncognitoModeAvailability value name does not exist or its value data is not set to 1, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Incognito mode availability Policy State: Enabled Policy Value: Incognito mode disabled

V-221579 CAT II Online revocation checks must be performed.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 80955251D21E00CC304F8D07DB6DF8B784D3F20C ~~~~~ 'Enable online OCSP/CRL checks' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableOnlineRevocationChecks Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 80955251D21E00CC304F8D07DB6DF8B784D3F20C ~~~~~ 'Enable online OCSP/CRL checks' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableOnlineRevocationChecks Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 80955251D21E00CC304F8D07DB6DF8B784D3F20C ~~~~~ 'Enable online OCSP/CRL checks' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableOnlineRevocationChecks Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 80955251D21E00CC304F8D07DB6DF8B784D3F20C ~~~~~ 'Enable online OCSP/CRL checks' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableOnlineRevocationChecks Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If EnableOnlineRevocationChecks is not displayed under the Policy Name column or it is not set to true under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the EnableOnlineRevocationChecks value name does not exist or its value data is not set to 1, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable online OCSP/CRL checks Policy State: Enabled Policy Value: N/A

V-221580 CAT II Safe Browsing must be enabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F8F90D651C3087C04215624DDEB48B3A3017E088 ~~~~~ 'Safe Browsing Protection Level' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingProtectionLevel Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: F8F90D651C3087C04215624DDEB48B3A3017E088 ~~~~~ 'Safe Browsing Protection Level' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingProtectionLevel Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F8F90D651C3087C04215624DDEB48B3A3017E088 ~~~~~ 'Safe Browsing Protection Level' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingProtectionLevel Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: F8F90D651C3087C04215624DDEB48B3A3017E088 ~~~~~ 'Safe Browsing Protection Level' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingProtectionLevel Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If SafeBrowsingProtectionLevel is not displayed under the Policy Name column or it is not set to 1 or 2 under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the SafeBrowsingProtectionLevel value name does not exist or its value data is not set to 1 or 2, then this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Safe Browsing Settings Policy Name: Safe Browsing Protection Level Policy State: Enabled Policy Value: "(1) Safe Browsing is active in the standard mode", or "(2) Safe Browsing is active in the enhanced mode. This mode provides better security, but requires sharing more browsing information with Google".

V-221581 CAT II Browser history must be saved.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A12DDD36DFD9595CB9B098FAF78EBD8FB4889289 ~~~~~ 'Disable saving browser history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SavingBrowserHistoryDisabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A12DDD36DFD9595CB9B098FAF78EBD8FB4889289 ~~~~~ 'Disable saving browser history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SavingBrowserHistoryDisabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A12DDD36DFD9595CB9B098FAF78EBD8FB4889289 ~~~~~ 'Disable saving browser history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SavingBrowserHistoryDisabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A12DDD36DFD9595CB9B098FAF78EBD8FB4889289 ~~~~~ 'Disable saving browser history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SavingBrowserHistoryDisabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If the policy 'SavingBrowserHistoryDisabled' is not shown or is not set to false, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the SavingBrowserHistoryDisabled value name does not exist or its value data is not set to 0, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Disable saving browser history Policy State: Disabled Policy Value: N/A

V-221584 CAT II The version of Google Chrome running on the system must be a...

4 assets 3 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) was unable to determine a Status but found the below configuration on 12/17/2025: ResultHash: 3108C306681EAB0AC285979DA9A5BBBA074551A2 ~~~~~ Google Chrome version information: Google Chrome (143.0.7499.147) Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) was unable to determine a Status but found the below configuration on 12/17/2025: ResultHash: 3108C306681EAB0AC285979DA9A5BBBA074551A2 ~~~~~ Google Chrome version information: Google Chrome (143.0.7499.147) Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: 879C99FEDB6AA3653CE96F2F1DDB0A1CDE798DB6 ~~~~~ Google Chrome version information: Google Chrome (141.0.7390.77) Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) was unable to determine a Status but found the below configuration on 10/23/2025: ResultHash: 879C99FEDB6AA3653CE96F2F1DDB0A1CDE798DB6 ~~~~~ Google Chrome version information: Google Chrome (141.0.7390.77) Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://settings/help 2. Cross-reference the build information displayed with the Google Chrome site to identify, at minimum, the oldest supported build available. As of July 2019, this is 74.x.x. 3. If the installed version of Chrome is not supported by Google, this is a finding.

Fix Text

Install a supported version of Google Chrome.

V-221586 CAT II Deletion of browser history must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7D247F79301C508404D9A276934D69D890FDF24A ~~~~~ 'Enable deleting browser and download history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AllowDeletingBrowserHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 7D247F79301C508404D9A276934D69D890FDF24A ~~~~~ 'Enable deleting browser and download history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AllowDeletingBrowserHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7D247F79301C508404D9A276934D69D890FDF24A ~~~~~ 'Enable deleting browser and download history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AllowDeletingBrowserHistory Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 7D247F79301C508404D9A276934D69D890FDF24A ~~~~~ 'Enable deleting browser and download history' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AllowDeletingBrowserHistory Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If the policy "AllowDeletingBrowserHistory" is not shown or is not set to false, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "AllowDeletingBrowserHistory" value name does not exist or its value data is not set to "0", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable deleting browser and download history Policy State: Disabled Policy Value: N/A

V-221587 CAT II Prompt for download location must be enabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 11A1A1E7ACB156F3C185EFA0DA6164974414AF23 ~~~~~ 'Ask where to save each file before downloading' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PromptForDownloadLocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 11A1A1E7ACB156F3C185EFA0DA6164974414AF23 ~~~~~ 'Ask where to save each file before downloading' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PromptForDownloadLocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 11A1A1E7ACB156F3C185EFA0DA6164974414AF23 ~~~~~ 'Ask where to save each file before downloading' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PromptForDownloadLocation Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 11A1A1E7ACB156F3C185EFA0DA6164974414AF23 ~~~~~ 'Ask where to save each file before downloading' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: PromptForDownloadLocation Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome:// policy 2. If "PromptForDownloadLocation" is not displayed under the "Policy Name" column or it is not set to "true" under the "Policy Value" column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "PromptForDownloadLocation" value name does not exist or its value data is not set to "1", this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Ask where to save each file before downloading Policy State: Enabled Policy Value: N/A

V-221588 CAT II Download restrictions must be configured.

4 assets 2 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT APPLICABLE on 12/17/2025 ResultHash: 131C51BE43E61BFBB569FDD5F046ADBBCD65A458 ~~~~~ This is a classified system so this requirement is NA. Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D6B549671195402555D023531B61C0FED4438686 ~~~~~ 'Allow download restrictions' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DownloadRestrictions Value: 0x00000001 (1) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D6B549671195402555D023531B61C0FED4438686 ~~~~~ 'Allow download restrictions' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DownloadRestrictions Value: 0x00000001 (1) Type: REG_DWORD Comments

Check Text

If the system is on the SIPRNet, this requirement is Not Applicable. Universal method: 1. In the omnibox (address bar) type "chrome:// policy". 2. If "DownloadRestrictions" is not displayed under the "Policy Name" column or it is set to "0", this is a finding. Windows method: 1. Start "regedit". 2. Navigate to "HKLM\Software\Policies\Google\Chrome\". 3. If the "DownloadRestrictions" value name does not exist or its value data is set to "0", this is a finding.

Fix Text

If the system is on the SIPRNet, this requirement is Not Applicable. Windows group policy: 1. Open the group policy editor tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Allow download restrictions Policy State: 1, 2, or 4 Policy Value: N/A

V-221590 CAT II Safe Browsing Extended Reporting must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 520ACF5572EACC0C1C519DD617C9528917939DA8 ~~~~~ 'Enable Safe Browsing Extended Reporting' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingExtendedReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 520ACF5572EACC0C1C519DD617C9528917939DA8 ~~~~~ 'Enable Safe Browsing Extended Reporting' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingExtendedReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 520ACF5572EACC0C1C519DD617C9528917939DA8 ~~~~~ 'Enable Safe Browsing Extended Reporting' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingExtendedReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 520ACF5572EACC0C1C519DD617C9528917939DA8 ~~~~~ 'Enable Safe Browsing Extended Reporting' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: SafeBrowsingExtendedReportingEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "SafeBrowsingExtendedReportingEnabled" is not displayed under the "Policy Name" column or it is not set to "False", this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "SafeBrowsingExtendedReportingEnabled" value name does not exist or its value data is not set to "0", this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Safe Browsing settings\ Policy Name: Enable Safe Browsing Extended Reporting Policy State: Disabled Policy Value: N/A

V-221591 CAT II WebUSB must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 409ADAACCEB33AFEE85CA2DD4450350EE9CF57C0 ~~~~~ 'Control use of the WebUSB API' is Enabled: (2) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebUsbGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 409ADAACCEB33AFEE85CA2DD4450350EE9CF57C0 ~~~~~ 'Control use of the WebUSB API' is Enabled: (2) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebUsbGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 409ADAACCEB33AFEE85CA2DD4450350EE9CF57C0 ~~~~~ 'Control use of the WebUSB API' is Enabled: (2) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebUsbGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 409ADAACCEB33AFEE85CA2DD4450350EE9CF57C0 ~~~~~ 'Control use of the WebUSB API' is Enabled: (2) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebUsbGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "DefaultWebUsbGuardSetting" is not displayed under the "Policy Name" column or it is not set to "2", this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "DefaultWebUsbGuardSetting" value name does not exist or its value data is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings Policy Name: Control use of the WebUSB API Policy State: Enabled Policy Value: 2

V-221594 CAT II Google Cast must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6BE230CB23EDC8BFED0FB02B9A889DA93F00CEC1 ~~~~~ 'Enable Google Cast' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableMediaRouter Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 6BE230CB23EDC8BFED0FB02B9A889DA93F00CEC1 ~~~~~ 'Enable Google Cast' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableMediaRouter Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6BE230CB23EDC8BFED0FB02B9A889DA93F00CEC1 ~~~~~ 'Enable Google Cast' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableMediaRouter Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 6BE230CB23EDC8BFED0FB02B9A889DA93F00CEC1 ~~~~~ 'Enable Google Cast' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: EnableMediaRouter Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "EnableMediaRouter" is not displayed under the "Policy Name" column or it is not set to "False", this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "EnableMediaRouter" value name does not exist or its value data is not set to "0", this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Google Cast Policy Name: Enable Google Cast Policy State: Disabled Policy Value: N/A

V-221595 CAT II Autoplay must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9BF76005607848898EEBB1940B14D6A20D2BDC4D ~~~~~ 'Allow media autoplay' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutoplayAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9BF76005607848898EEBB1940B14D6A20D2BDC4D ~~~~~ 'Allow media autoplay' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutoplayAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9BF76005607848898EEBB1940B14D6A20D2BDC4D ~~~~~ 'Allow media autoplay' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutoplayAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9BF76005607848898EEBB1940B14D6A20D2BDC4D ~~~~~ 'Allow media autoplay' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutoplayAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "AutoplayAllowed" is not displayed under the "Policy Name" column or it is not set to "False", this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "AutoplayAllowed" value name does not exist or its value data is not set to "0", this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Allow media autoplay Policy State: Disabled Policy Value: N/A

V-221596 CAT II URLs must be allowlisted for Autoplay use.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AAD1ABC02C91EED66628615D9BAF76514E0BC7FE ~~~~~ Registry key for HKLM:SOFTWARE\Policies\Google\Chrome\AutoplayAllowlist exists. Current values: 1 : [.]mil 2 : [.]gov Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: AAD1ABC02C91EED66628615D9BAF76514E0BC7FE ~~~~~ Registry key for HKLM:SOFTWARE\Policies\Google\Chrome\AutoplayAllowlist exists. Current values: 1 : [.]mil 2 : [.]gov Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAD1ABC02C91EED66628615D9BAF76514E0BC7FE ~~~~~ Registry key for HKLM:SOFTWARE\Policies\Google\Chrome\AutoplayAllowlist exists. Current values: 1 : [.]mil 2 : [.]gov Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: AAD1ABC02C91EED66628615D9BAF76514E0BC7FE ~~~~~ Registry key for HKLM:SOFTWARE\Policies\Google\Chrome\AutoplayAllowlist exists. Current values: 1 : [.]mil 2 : [.]gov Comments

Check Text

Universal method: 1. In the omnibox (address bar), type chrome://policy. 2. If “AutoplayAllowlist” under the “Policy Name” column may be set to a list of administrator-approved URLs under the “Policy Value” column. This requirement is optional. Windows method: 1. Start regedit. 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the “AutoplayAllowlist” key may contain a list of administrator-approved URLs. This requirement is optional.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome - Policy Name: Allow media autoplay on a allowlist of URL patterns. - Policy State: Enabled - Policy Value 1: [*.]mil - Policy Value 2: [*.]gov Note: Policy values are examples.

V-221597 CAT II Anonymized data collection must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A9D99B15A6AD5BCA7D481C7ED16340FA67E490F2 ~~~~~ 'Enable URL-keyed anonymized data collection' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: UrlKeyedAnonymizedDataCollectionEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: A9D99B15A6AD5BCA7D481C7ED16340FA67E490F2 ~~~~~ 'Enable URL-keyed anonymized data collection' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: UrlKeyedAnonymizedDataCollectionEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9D99B15A6AD5BCA7D481C7ED16340FA67E490F2 ~~~~~ 'Enable URL-keyed anonymized data collection' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: UrlKeyedAnonymizedDataCollectionEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: A9D99B15A6AD5BCA7D481C7ED16340FA67E490F2 ~~~~~ 'Enable URL-keyed anonymized data collection' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: UrlKeyedAnonymizedDataCollectionEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "UrlKeyedAnonymizedDataCollectionEnabled" is not displayed under the “Policy Name” column or it is not set to "0" under the “Policy Value” column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the “UrlKeyedAnonymizedDataCollectionEnabled" value name does not exist or its value data is not set to "0," this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable URL-keyed anonymized data collection Policy State: Disabled Policy Value: NA

V-221598 CAT II Collection of WebRTC event logs must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2D439B2C63C7192C93A0FE653C80534DF7EB6D19 ~~~~~ 'Allow collection of WebRTC event logs from Google services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: WebRtcEventLogCollectionAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 2D439B2C63C7192C93A0FE653C80534DF7EB6D19 ~~~~~ 'Allow collection of WebRTC event logs from Google services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: WebRtcEventLogCollectionAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2D439B2C63C7192C93A0FE653C80534DF7EB6D19 ~~~~~ 'Allow collection of WebRTC event logs from Google services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: WebRtcEventLogCollectionAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 2D439B2C63C7192C93A0FE653C80534DF7EB6D19 ~~~~~ 'Allow collection of WebRTC event logs from Google services' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: WebRtcEventLogCollectionAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If "WebRtcEventLogCollectionAllowed" is not displayed under the “Policy Name” column or it is not set to "0" under the “Policy Value” column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the "WebRtcEventLogCollectionAllowed" value name does not exist or its value data is not set to "0," this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Allow collection of WebRTC event logs from Google services Policy State: Disabled Policy Value: NA

V-226401 CAT II Guest Mode must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9F9920DF01122CE48F038C86CC0E5E2427F05ED7 ~~~~~ 'Enable guest mode in browser' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BrowserGuestModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 9F9920DF01122CE48F038C86CC0E5E2427F05ED7 ~~~~~ 'Enable guest mode in browser' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BrowserGuestModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9F9920DF01122CE48F038C86CC0E5E2427F05ED7 ~~~~~ 'Enable guest mode in browser' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BrowserGuestModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 9F9920DF01122CE48F038C86CC0E5E2427F05ED7 ~~~~~ 'Enable guest mode in browser' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: BrowserGuestModeEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If BrowserGuestModeEnabled is not displayed under the Policy Name column or it is not set to 0 under the Policy Value column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the BrowserGuestModeEnabled value name does not exist or its value data is not set to 0, this is a finding.

Fix Text

Windows group policy: 1. Open the "group policy editor" tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable guest mode in browser Policy State: Disabled

V-226402 CAT II AutoFill for credit cards must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D992FAF5853E55631FCF2738755CA01F9B5B2D1B ~~~~~ 'Enable AutoFill for credit cards' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillCreditCardEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D992FAF5853E55631FCF2738755CA01F9B5B2D1B ~~~~~ 'Enable AutoFill for credit cards' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillCreditCardEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D992FAF5853E55631FCF2738755CA01F9B5B2D1B ~~~~~ 'Enable AutoFill for credit cards' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillCreditCardEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D992FAF5853E55631FCF2738755CA01F9B5B2D1B ~~~~~ 'Enable AutoFill for credit cards' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillCreditCardEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If AutofillCreditCardEnabled is not displayed under the Policy Name column or it is not set to 0 under the Policy Value column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the AutofillCreditCardEnabled value name does not exist or its value data is not set to 0, this is a finding.

Fix Text

Windows group policy: 1. Open the "group policy editor" tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable AutoFill for credit cards Policy State: Disabled

V-226403 CAT II AutoFill for addresses must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: CF6C56E9F0E05F11B548FC9151923E42E451E7EC ~~~~~ 'Enable AutoFill for addresses' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillAddressEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: CF6C56E9F0E05F11B548FC9151923E42E451E7EC ~~~~~ 'Enable AutoFill for addresses' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillAddressEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CF6C56E9F0E05F11B548FC9151923E42E451E7EC ~~~~~ 'Enable AutoFill for addresses' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillAddressEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: CF6C56E9F0E05F11B548FC9151923E42E451E7EC ~~~~~ 'Enable AutoFill for addresses' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: AutofillAddressEnabled Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If AutofillAddressEnabled is not displayed under the Policy Name column or it is not set to 0 under the Policy Value column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the AutofillAddressEnabled value name does not exist or its value data is not set to 0, this is a finding.

Fix Text

Windows group policy: 1. Open the "group policy editor" tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Enable AutoFill for addresses Policy State: Disabled

V-226404 CAT II Import AutoFill form data must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D74F6E90D1303296730DB38466F50AADAD122095 ~~~~~ 'Import autofill form data from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportAutofillFormData Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: D74F6E90D1303296730DB38466F50AADAD122095 ~~~~~ 'Import autofill form data from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportAutofillFormData Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D74F6E90D1303296730DB38466F50AADAD122095 ~~~~~ 'Import autofill form data from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportAutofillFormData Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: D74F6E90D1303296730DB38466F50AADAD122095 ~~~~~ 'Import autofill form data from default browser on first run' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: ImportAutofillFormData Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If ImportAutofillFormData is not displayed under the Policy Name column or it is not set to 0 under the Policy Value column, this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the ImportAutofillFormData value name does not exist or its value data is not set to 0, this is a finding.

Fix Text

Windows group policy: 1. Open the "group policy editor" tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\ Policy Name: Import autofill form data from default browser on first run Policy State: Disabled

V-241787 CAT II Web Bluetooth API must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 878C9C503CF30370A0F99099040EFE4365DF4170 ~~~~~ 'Control use of the Web Bluetooth API' is Enabled (Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebBluetoothGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 878C9C503CF30370A0F99099040EFE4365DF4170 ~~~~~ 'Control use of the Web Bluetooth API' is Enabled (Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebBluetoothGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 878C9C503CF30370A0F99099040EFE4365DF4170 ~~~~~ 'Control use of the Web Bluetooth API' is Enabled (Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebBluetoothGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 878C9C503CF30370A0F99099040EFE4365DF4170 ~~~~~ 'Control use of the Web Bluetooth API' is Enabled (Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DefaultWebBluetoothGuardSetting Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If DefaultWebBluetoothGuardSetting is not displayed under the Policy Name column or it is not set to 2 under the Policy Value column, then this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the DefaultWebBluetoothGuardSetting value name does not exist or its value data is not set to 2, then this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Content Settings Policy Name: Control use of the Web Bluetooth API Policy State: Enabled Policy Value: Do not allow any site to request access to Bluetooth devices via the Web Bluetooth API

V-245538 CAT II Use of the QUIC protocol must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3388A79B1F7719EC09A512653AF6198C72276AFF ~~~~~ 'Allow QUIC protocol' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: QuicAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 3388A79B1F7719EC09A512653AF6198C72276AFF ~~~~~ 'Allow QUIC protocol' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: QuicAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3388A79B1F7719EC09A512653AF6198C72276AFF ~~~~~ 'Allow QUIC protocol' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: QuicAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 3388A79B1F7719EC09A512653AF6198C72276AFF ~~~~~ 'Allow QUIC protocol' is Disabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: QuicAllowed Value: 0x00000000 (0) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar), type chrome://policy. 2. If QuicAllowed is not displayed under the Policy Name column or it is not set to False under the Policy Value column, this is a finding. Windows method: 1. Start regedit. 2. Navigate to HKLM\Software\Policies\Google\Chrome\. 3. If the QuicAllowed value name does not exist or its value data is not set to 0, this is a finding.

Fix Text

Windows group policy: 1. Open the “group policy editor” tool with gpedit.msc. 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google Chrome. - Policy Name: Allow QUIC protocol - Policy State: Disabled - Policy Value: N/A

V-221563 CAT III Extensions that are approved for use must be allowlisted.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 223250B6A902F24CD16C85C922E3E72BD539D148 ~~~~~ 'Configure extension installation allowlist' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallAllowlist Value Name: 1 Value: oiigbmnaadbkfbmpbfijlflahbdbdgdf Type: REG_SZ Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: 223250B6A902F24CD16C85C922E3E72BD539D148 ~~~~~ 'Configure extension installation allowlist' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallAllowlist Value Name: 1 Value: oiigbmnaadbkfbmpbfijlflahbdbdgdf Type: REG_SZ Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 223250B6A902F24CD16C85C922E3E72BD539D148 ~~~~~ 'Configure extension installation allowlist' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallAllowlist Value Name: 1 Value: oiigbmnaadbkfbmpbfijlflahbdbdgdf Type: REG_SZ Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: 223250B6A902F24CD16C85C922E3E72BD539D148 ~~~~~ 'Configure extension installation allowlist' is Enabled Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome\ExtensionInstallAllowlist Value Name: 1 Value: oiigbmnaadbkfbmpbfijlflahbdbdgdf Type: REG_SZ Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If ExtensionInstallAllowlist is not displayed under the Policy Name column or it is not set to oiigbmnaadbkfbmpbfijlflahbdbdgdf or a list of administrator approved extension IDs, then this is a finding. Windows method: 1. Start regedit 2. Navigate to the key HKLM\Software\Policies\Google\Chrome\ExtensionInstallAllowlist 3. If the ExtensionInstallAllowlist key is not set to 1 and oiigbmnaadbkfbmpbfijlflahbdbdgdf or a list of administrator-approved extension IDs, then this is a finding.

Fix Text

Windows group policy: 1. Open the group policy editor tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome\Extensions\ Policy Name: Configure extension installation allowlist Policy State: Enabled Policy Value: oiigbmnaadbkfbmpbfijlflahbdbdgdf Note: oiigbmnaadbkfbmpbfijlflahbdbdgdfis the extension ID for scriptno (a commonly used Chrome extension), other extension IDs may vary.

V-221599 CAT III Chrome development tools must be disabled.

4 assets 4 Closed Google Chrome Curren...

Hostname	IP Address	Last Scan
MONT-SW-89108	22.19.120.22	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BF276DF9BBE92D2FF0B322B8EFE8A73249B8EB7D ~~~~~ 'Control where Developer Tools can be used' is Enabled: (Disallow usage of the Developer Tools) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DeveloperToolsAvailability Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-SW-89134	22.19.120.21	2026-03-04
Finding Details Evaluate-STIG 1.2510.0 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 12/17/2025 ResultHash: BF276DF9BBE92D2FF0B322B8EFE8A73249B8EB7D ~~~~~ 'Control where Developer Tools can be used' is Enabled: (Disallow usage of the Developer Tools) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DeveloperToolsAvailability Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92010	164.231.187.45	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BF276DF9BBE92D2FF0B322B8EFE8A73249B8EB7D ~~~~~ 'Control where Developer Tools can be used' is Enabled: (Disallow usage of the Developer Tools) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DeveloperToolsAvailability Value: 0x00000002 (2) Type: REG_DWORD Comments
MONT-WS-92040	164.231.187.72	2026-01-14
Finding Details Evaluate-STIG 1.2507.5 (Scan-GoogleChrome_Checks) found this to be NOT A FINDING on 10/23/2025 ResultHash: BF276DF9BBE92D2FF0B322B8EFE8A73249B8EB7D ~~~~~ 'Control where Developer Tools can be used' is Enabled: (Disallow usage of the Developer Tools) Registry Path: HKLM:\SOFTWARE\Policies\Google\Chrome Value Name: DeveloperToolsAvailability Value: 0x00000002 (2) Type: REG_DWORD Comments

Check Text

Universal method: 1. In the omnibox (address bar) type chrome://policy 2. If the policy "DeveloperToolsAvailability" is not shown or is not set to "2", this is a finding. Windows method: 1. Start regedit 2. Navigate to HKLM\Software\Policies\Google\Chrome\ 3. If the key "DeveloperToolsAvailability" does not exist or is not set to "2", this is a finding.

Fix Text

Windows group policy: 1. Open the "group policy editor" tool with gpedit.msc 2. Navigate to Policy Path: Computer Configuration\Administrative Templates\Google\Google Chrome Policy Name: Control where Developer Tools can be used Policy State: Enabled Policy Value: Disallow usage of the Developer Tools

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Finding Details

Comments

Check Text

Fix Text