UCF STIG Viewer Logo

BlackBerry 10 OSs VPN client must use either IPSec or SSL/TLS when connecting to DoD networks.


Overview

Finding ID Version Rule ID IA Controls Severity
V-38307 BB10-00-000270 SV-50107r2_rule Medium
Description
Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability.
STIG Date
BlackBerry 10 OS Security Technical Implementation Guide 2014-08-27

Details

Check Text ( C-45854r3_chk )
From either the Work Space or Personal Space, navigate to "Settings -> Network Connections -> VPN". Select "Edit" to edit a VPN Profile. For each VPN Profile connecting to DoD networks:
- Select the VPN Profile to edit.
- Ensure "Gateway Type" is set to a type which supports and utilizes IPSec and SSL/TLS. Otherwise, this is a finding.

NOTE: If no VPN profiles are saved, this requirement is NA.
Fix Text (F-43245r2_fix)
On BlackBerry Device Service, select the affected VPN Profile for edit, and set "Gateway Type" to a type which supports and utilizes IPSec and SSL/TLS.