Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-97365 | GOOG-09-010400 | SV-106469r1_rule | Medium |
Description |
---|
Outgoing beam allows transfer of data through near field communication (NFC) and Bluetooth by touching two unlocked devices together. If it were enabled, sensitive DoD data could be transmitted. Because of the security risks of sharing sensitive DoD data, users must not be able to allow outgoing beam. SFR ID: FMT_MOF_EXT.1.2 #47 |
STIG | Date |
---|---|
Google Android 9.x Security Technical Implementation Guide | 2019-08-28 |
Check Text ( C-96201r1_chk ) |
---|
Review the Google Android Pie device configuration settings to confirm that outgoing beam is disallowed. This procedure is performed on both the MDM Administration console and the Google Android Pie device. On the MDM console, in the Android user restrictions section, select "Disallow outgoing beam" to on". On the Google Android Pie device, do the following: 1. Open Settings. 2. Tap "Connected devices". 3. Tap "Connection preferences". 4. Verify that "Android Beam" is off and grayed out. If on the MDM console "Disallow outgoing beam" is not set to on, or on the Google Android Pie device "Android Beam" is not off and grayed out, this is a finding. |
Fix Text (F-103045r1_fix) |
---|
Configure Google Android Pie device to disallow outgoing beam. On the MDM console, in the Android user restrictions section, select "Disallow outgoing beam" to on. |