Wireless email device users should not install or remove applications and/or software on their handheld device unless under the direction and supervision of an authorized system administrator. IT Policy rule “Show Application Loader” (Desktop-Only policy group) is set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-14478	WIR1415-01	SV-15096r8_rule	ECSC-1	Medium

Description
The wireless email server can be configured to prevent users from installing or removing applications. These configuration settings must be set at the enterprise level to prevent users from downloading, using desktop software, unauthorized software or harmful code.

STIG	Date
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide	2011-04-11

Details

Check Text ( C-14986r5_chk )
Detailed Policy Requirements: *** For this check, set IT Policy rule “Show Application Loader” (Desktop-Only policy group) to "No" or “FALSE.” Check Procedures: This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). ***Verify IT Policy rule “Show Application Loader” (Desktop-Only policy group) is set as required.

Check Text ( C-14986r5_chk )

Detailed Policy Requirements:

***** For this check, set IT Policy rule “Show Application Loader” (Desktop-Only policy group) to "No" or “FALSE.”

Check Procedures:

This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify IT Policy rule “Show Application Loader” (Desktop-Only policy group) is set as required.

Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.