BlackBerry 10 OS's VPN client must use either IPSec or SSL/TLS when connecting to DoD networks.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| BB10-00-000270 | BB10-00-000270 | BB10-00-000270_rule | Medium |
| Description |
|---|
| Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability. |
| STIG | Date |
|---|---|
| BlackBerry 10 OS STIG | 2013-05-03 |
Details
| Check Text ( C-BB10-00-000270_chk ) |
|---|
| Navigate to "Settings -> Network Connections -> VPN". Select "Edit" to edit a VPN Profile. For each VPN Profile connecting to DoD networks: - Select the VPN Profile to edit. - Ensure "Gateway Type" is set to a type which supports and utilizes IPSec and SSL/TLS. Otherwise, this is a finding. |
| Fix Text (F-BB10-00-000270_fix) |
|---|
| On BlackBerry Device Service, select the affected VPN Profile for edit, and set "Gateway Type" to a type which supports and utilizes IPSec and SSL/TLS. |