Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-22055 | WIR1345-01 | SV-25491r1_rule | ECWN-1 | Medium |
Description |
---|
A DoD application repository must contain only authorized applications and only approved and unaltered versions of those applications. If DoD application repositories are not on DoD controlled servers inside DoD enclaves, the integrity of those applications could be compromised. |
STIG | Date |
---|---|
BlackBerry Enterprise Server, Part 2 Security Technical Implementation Guide | 2012-10-01 |
Check Text ( C-27006r1_chk ) |
---|
Talk to the site BES administrator. Determine if the site has set up an application repository. If yes, verify the repository is on a DoD-controlled server in a DoD enclave. If the repository is not located in the DoD enclave, mark as a finding. |
Fix Text (F-23380r1_fix) |
---|
Application repositories will be located on a DoD-controlled server within a DoD enclave. |