All Internet browsing on a DoD mobile operating system (OS) device will go through a DoD Internet proxy.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24985	WIR-MOS-AND-005	SV-38760r1_rule	ECSC-1	Low

Description
A DoD Internet proxy provides additional security over the carrier's browser. When using the DoD Internet proxy for mobile device Internet connections, enclave Internet security controls will filter and monitor mobile device Internet connections.

STIG	Date
Android 2.2 (Dell) Security Technical Implementation Guide	2011-11-28

Details

Check Text ( C-37826r1_chk )
Verify the URL of a DoD external facing Internet proxy has been configured in the Good server console. This is a Good security policy set check. Recommend all checks related to Good security policy set rules be reviewed using the following procedure. 1. Make a list of all Good security policy sets assigned to smartphone user accounts on the Good server using the following procedure: -Have the SA identify any non STIG-compliant policy sets and STIG-compliant policy sets on the server. --Log into the Good Mobile Control console. --Click on the Policies tab. --View all policy set on the server. -Note: STIG-compliant policy sets should be identified as such in the policy title, for example, STIG_Android_Policy_Set. It is recommended all non STIG-compliant policy sets be deleted. 2. Select each policy set users are assigned to, and in turn, verify the required settings are in the policy set. Note: If there is a finding, note the name of the non STIG-compliant policy set in the Findings Details section in VMS/Component Provided Tracking Database. --------------------- -Launch the Good Mobile Control Web console and click on the Policies tab. -Select the policy set for the Android devices and click on Android Configuration on the left side. -Click the Restrictions tab. -Verify “Enable HTTP Proxy is set and a Host URL is listed and the Port is set to 8080. Mark as a finding if configuration is not set as required. Mark as a finding if a DoD Internet proxy URL has not been setup on the Good server.

Check Text ( C-37826r1_chk )

Verify the URL of a DoD external facing Internet proxy has been configured in the Good server console.

This is a Good security policy set check. Recommend all checks related to Good security policy set rules be reviewed using the following procedure.

1. Make a list of all Good security policy sets assigned to smartphone user accounts on the Good server using the following procedure:

-Have the SA identify any non STIG-compliant policy sets and STIG-compliant policy sets on the server.
--Log into the Good Mobile Control console.
--Click on the Policies tab.
--View all policy set on the server.

-Note: STIG-compliant policy sets should be identified as such in the policy title, for example, STIG_Android_Policy_Set. It is recommended all non STIG-compliant policy sets be deleted.

2. Select each policy set users are assigned to, and in turn, verify the required settings are in the policy set.

Note: If there is a finding, note the name of the non STIG-compliant policy set in the Findings Details section in VMS/Component Provided Tracking Database.
---------------------

-Launch the Good Mobile Control Web console and click on the Policies tab.
-Select the policy set for the Android devices and click on Android Configuration on the left side.

-Click the Restrictions tab.
-Verify “Enable HTTP Proxy is set and a Host URL is listed and the Port is set to 8080.

Mark as a finding if configuration is not set as required.

Mark as a finding if a DoD Internet proxy URL has not been setup on the Good server.

Fix Text (F-27626r1_fix)
Ensure Internet browsing on the mobile OS device goes through a DoD Internet proxy.