Do not attempt to implement any of the settings without first testing them in a non-operational environment. Please see the National Checklist Program (NCP) website for configuration guides related to other Windows Based systems and applications.
The draft download packages contain recommended security settings; they are not meant to replace well-structured policy or sound judgment. Furthermore, these recommendations do not address site-specific configuration issues. Care must be taken when implementing these settings to address local operational and policy concerns.
These recommendations were developed at the National Institute of Standards and Technology, which collaborated with DoD and Microsoft to produce the Windows 7, Windows 7 Firewall, Internet Explorer 8 USGCB. Pursuant to title 17 Section 105 of the United States Code, these recommendations are not subject to copyright protection and are in the public domain. NIST assumes no responsibility whatsoever for their use by other parties, and makes no guarantees, expressed or implied, about their quality, reliability, or any other characteristic. We would appreciate acknowledgement if the recommendations are used.
The following sections provide the downloads for the Internet Explorer 8 USGCB Content. VHDs are also available to use for testing. Additional information can be found in the FAQ.
Please refer to the top-level Microsoft Content Page for the listing of all USGCB settings and associated hash values.
USGCB Major Version 1.3.x.1 Known IssuesPlease refer to the top-level Microsoft Content Page for the listing of all known issues relating to USGCB content and associated hash values.
Date | Documentation | GPOs | SCAP Content | CCE to 800-53 Mappings |
---|---|---|---|---|
April 20, 2015 | No changes | No changes | USGCB minor version 1.3.3.1 Final Release SCAP content posted. | No changes |
February 25, 2015 | USGCB SCAP 1.2 Settings posted | No changes | USGCB minor version 1.3.3.1 Release Candidate SCAP content posted. | No changes |
February 25, 2015 | No changes | No changes | Removed SCAP 1.0 USGCB content. | No changes |
October 03, 2014 | Added the following CCEs:CCE-9793-1, CCE-9832-7, and CCE-10425-7 | No changes | No changes | No changes |
December 17, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
November 19, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
October 22, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
September 20, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
August 30, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
July 31, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
June 25, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
May 29, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
April 29, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
March 21, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
February 25, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
January 22, 2013 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
December 28, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
December 05, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
November 28, 2012 | No changes | No changes | SCAP 1.2 (Oval 5.10) content signature updated; no other change to content. | No changes |
October 31, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
August 17, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
July 30, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
June 15, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. | No changes |
May 21, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted. SCAP 1.2 (Oval 5.10) content signature updated; no change to content | No changes |
April 23, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
March 22, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
February 23, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
January 23, 2012 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
November 14, 2011 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
November 10, 2011 | No changes | USGCB GPOs posted | No changes | No changes |
October 26, 2011 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
October 17, 2011 | No changes | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
October 04, 2011 | No changes | No changes | No changes | National Checklist Program's Machine-readable CCE to 800-53 Mappings linked |
September 21, 2011 | USGCB major version 1.2.x.0 Settings and Known Issues posted | No changes | USGCB major version 1.2.x.0 SCAP content posted | No changes |
August 18, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
July 27, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
July 06, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
April 28, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
March 18, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
February 22, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
February 04, 2011 | No changes | USGCB major version 1.1.x.0 GPOs posted | No changes | No changes |
January 31, 2011 | USGCB major version 1.1.x.0 Settings and Known Issues posted | No changes | USGCB major version 1.1.x.0 SCAP content posted | No changes |
January 20, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
January 07, 2011 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
November 17, 2010 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
November 09, 2010 | USGCB/FDCC Comparison for Internet Explorer updated | No changes | No changes | No changes |
October 27, 2010 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
October 20, 2010 | No changes | USGCB GPOs posted | No changes | No changes |
September 30, 2010 | No changes | No changes | USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
September 24, 2010 | USGCB major version 1.0.x.0 Settings Known Issues posted | No changes | USGCB major version 1.0.x.0 SCAP content posted | CCE mapping updates reflected in USGCB Settings spreadsheet |
August 31, 2010 | USGCB Beta Settings and updated SCAP content issues posted | USGCB Beta GPOs posted | USGCB Beta SCAP content posted | CCE mapping updates reflected in USGCB Beta Settings spreadsheet |
August 20, 2010 | No changes | No changes | Alpha USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
August 09, 2010 | No changes | No changes | Alpha USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
July 20, 2010 | No changes | No changes | Alpha USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
June 30, 2010 | USGCB/FDCC Comparison for Internet Explorer added | No changes | No changes | No changes |
June 16, 2010 | No changes | No changes | Alpha USGCB OVAL 5.3 & 5.4 patch content updated | No changes |
April 23, 2010 | Alpha Content Released | Alpha Content Released | Alpha Content Released | Alpha Content Released |
Security and Privacy: configuration management, security automation, vulnerability management