Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-40717 | BB10-00-000335 | SV-52717r1_rule | Medium |
Description |
---|
Proxy servers can inspect traffic for malware and other signs of a security attack. Allowing a mobile device to access the public Internet without proxy server inspection forgoes the protection that the proxy server would otherwise provide. Malware downloaded onto the device could have a wide variety of malicious consequences, including loss of sensitive DoD information. Forcing traffic to flow through a proxy server greatly mitigates the risk of access to public Internet resources. Proxy profiles specify how users use a proxy server to access web services on the Internet or on the DoD network. A proxy profile can be associated with a Wi-Fi profile or VPN profile. For users to use a proxy server when they connect to the Internet or the DoD network using the BlackBerry Infrastructure, associate a proxy profile with a BlackBerry Device Service instance. To add a proxy profile to a BlackBerry Device Service instance, all devices running BlackBerry 10 OS associated with the instance use the proxy profile to access web services on the Internet or DoD's network using the BlackBerry Infrastructure. Devices use the BlackBerry Infrastructure when a VPN or Wi-Fi connection is not available. |
STIG | Date |
---|---|
BlackBerry 10 OS Security Technical Implementation Guide | 2014-08-27 |
Check Text ( C-47045r1_chk ) |
---|
On BlackBerry Device Service, navigate to the Servers and components menu and expand BlackBerry Solution topology >> BlackBerry Domain >> Component view >> BlackBerry Device Service. Click the name of the BlackBerry Device Service instance. Verify in the Instance associations pane, the preconfigured Proxy Profile for DoD use is shown as the value for the Proxy profile. If the preconfigured Proxy Profile for DoD use is not shown for the value for the Proxy profile. this is a finding. |
Fix Text (F-45642r1_fix) |
---|
On BlackBerry Device Service, navigate to the Servers and components menu and expand BlackBerry Solution topology >> BlackBerry Domain >> Component view >> BlackBerry Device Service. Click the name of the BlackBerry Device Service instance and click Edit instance. In the Instance associations section, in the Proxy profile drop-down list, select the preconfigured Proxy Profile for DoD use. Click Save all. |