Application repositories must be located on a DoD-controlled server within a DoD enclave. If not set up, this check is Not Applicable.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22055	WIR1345-01	SV-25491r1_rule	ECWN-1	Medium

Description
A DoD application repository must contain only authorized applications and only approved and unaltered versions of those applications. If DoD application repositories are not on DoD controlled servers inside DoD enclaves, the integrity of those applications could be compromised.

STIG	Date
BlackBerry Enterprise Server, Part 2 Security Technical Implementation Guide	2012-10-01

Details

Check Text ( C-27006r1_chk )
Talk to the site BES administrator. Determine if the site has set up an application repository. If yes, verify the repository is on a DoD-controlled server in a DoD enclave. If the repository is not located in the DoD enclave, mark as a finding.

Fix Text (F-23380r1_fix)
Application repositories will be located on a DoD-controlled server within a DoD enclave.