U.S. flag   An official website of the United States government
Dot gov

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Https

Secure .gov websites use HTTPS
A lock (Dot gov) or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites.

Internet Explorer 11 STIG Ver 2, Rel 9 Checklist Details (Checklist Revisions)

SCAP 1.3 Content:

Supporting Resources:

  • Download Standalone XCCDF 1.1.4 - Sunset - Microsoft Internet Explorer 11 STIG - Ver
    • Defense Information Systems Agency
  • Download Intune Policies - Intune Policy - January 2026
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
  • Download GPOs - Group Policy Objects (GPOs) - January 2026
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
  • Download Automated Content - SCC 5.14 Windows
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency
    • Defense Information Systems Agency

Target:

Target CPE Name
Microsoft Internet Explorer 11 cpe:/a:microsoft:internet_explorer:11:- (View CVEs)

Checklist Highlights

Checklist Name:
Internet Explorer 11 STIG
Checklist ID:
492
Version:
Ver 2, Rel 9
Type:
Compliance
Review Status:
Final
Authority:
Governmental Authority: Defense Information Systems Agency
Original Publication Date:
02/28/2017

Checklist Summary:

The Internet Explorer (IE) 11 Overview, along with the IE11 Security Technical Implementation Guide (STIG), provides the technical security policies, requirements, and implementation details for applying security concepts to Microsoft Internet Explorer 11 web browser. The IE11 web browser utilizes mobile code and Public Key Infrastructure (PKI) technologies to enable some of its features. The requirements described in this document are designed to implement the applicable Department of Defense (DoD) polices for those technologies. These policies are described in the Use of Mobile Code Technologies in Department of Defense (DoD) Information Systems (later referred to as the DoD Mobile Code Policy) and the Department of Defense Instruction, “Department of Defense (DoD) Public Key Infrastructure (PKI) and Public Key (PK) Enabling documents.

Checklist Role:

  • Web Browser

Known Issues:

Not Provided

Target Audience:

Not Provided

Target Operational Environment:

  • Managed
  • Specialized Security-Limited Functionality (SSLF)

Testing Information:

The Microsoft IE11 STIG was developed using a Microsoft Internet Explorer 11 installation on a system running Microsoft Windows 8.

Regulatory Compliance:

DoD Instruction (DoDI) 8500.01

Comments/Warnings/Miscellaneous:

Comments or proposed revisions to this document should be sent via email to the following address: [email protected]. DISA Field Security Operations (FSO) will coordinate all change requests with the relevant DoD organizations before inclusion in this document. Approved changes will be made in accordance with the DISA FSO maintenance release schedule.

Disclaimer:

Not Provided

Product Support:

Not Provided

Point of Contact:

[email protected]

Sponsor:

Not Provided

Licensing:

Not Provided

Change History:



					

Dependency/Requirements:

URL Description

References:

Reference URL Description

NIST checklist record last modified on 02/13/2026