UCF STIG Viewer Logo

Required security controls must be used when BlackBerry Wi-Fi is used by the site to connect to a DoD Wi-Fi network. Required security controls are in Table 2, BlackBerry STIG Configuration Tables.


Overview

Finding ID Version Rule ID IA Controls Severity
V-19224 WIR1325-01 SV-21113r2_rule ECWN-1 Low
Description
If BlackBerry Wi-Fi controls are not implemented, DoD data can be compromised.
STIG Date
BlackBerry Enterprise Server, Part 2 Security Technical Implementation Guide 2012-10-01

Details

Check Text ( C-23162r2_chk )
Ask the BlackBerry system administrator if the site uses BlackBerry Wi-Fi to connect to DoD WLAN. If yes, verify the following actions have occurred.

1. Determine which BlackBerry users have been approved to use BlackBerry Wi-Fi to connect to the DoD WLAN. Ask the IAO or BlackBerry SA for names of site BlackBerry users that have been authorized to use BlackBerry Wi-Fi Service.

2. Verify these users have been assigned a WLAN Configuration Set (profile). Verify that authorized users have been assigned a WLAN profile as follows (select two or three users to check).

- On the BAS, in the BlackBerry solution management box, expand “User” and click on “Manage users”. Then, click on search in the center screen. A list of all users assigned to the BES will be available.
- Click the user account to verify a WLAN profile has been assigned.
- Click on the WLAN configuration tab.
- Look to see the name of the WLAN configuration (profile) that has been assigned to the user (if any).
-Verify each assigned WLAN Configuration Set (profile) is configured as required. The required configuration is listed in Table C-2 of the BlackBerry STIG Overview (see procedure below).

3. Verify each assigned WLAN Configuration Set (profile) is configured as required. The required configuration is listed in Table C-2 of the BlackBerry STIG Overview (see procedure below).

Mark as a finding if any user accounts authorized for WLAN do not have a WLAN configuration assigned to the account.

The setup of each WLAN Configuration Set on the BES can be viewed as follows.

- BAS > BlackBerry solution management box > Policy > WLAN configuration > Manage WLAN configurations.
- For each listed WLAN configuration to be checked, click on the configuration, then click on the WLAN configuration data tab.
- Verify rules are set as shown in Table C-2 (only rules with “Required” settings need to be verified).

Mark as a finding if the WLAN profile has not been configured as required.
Fix Text (F-23376r1_fix)
Required security controls used when BlackBerry Wi-Fi is used by the site to connect to a DoD Wi-Fi network.