If mobile device email auto signatures are used, the signature message must not disclose the email originated from a CMD (e.g., Sent From My Wireless Handheld).

If mobile device email auto signatures are used, the signature message must not disclose the email originated from a CMD (e.g., Sent From My Wireless Handheld).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24984	WIR-MOS-iOS-004	SV-30783r2_rule	ECSC-1	Low

Description
The disclaimer message may give information which may key an attacker in on the device.

STIG	Date
Apple iOS 6 Security Technical Implementation Guide (STIG)	2013-05-23

Details

Check Text ( C-31199r6_chk )
Launch the mobile email client and verify that if the email auto signature feature is used, it is compliant with the requirement. The exact procedures will depend on which mobile email product is being used. Mark as a finding if not compliant. If the Good Technology client is used: •Log into the iOS device. •Open the Good application. •Go to Preferences > Signature.

Fix Text (F-27625r4_fix)
Configure the iOS email auto-signature message, so it does not disclose the email originated from the iOS device (e.g., Sent From My Wireless Handheld).