BES IT Policy rule is configured as required. IT Policy rule “Allow Web-Based Software Loading” (Wired Software Updates policy group) will be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-25880	WIR1450-45	SV-32235r1_rule	ECSC-1	Low

Description
If not configured as specified, a user could download a non-DoD approved software update or application, which could adversely impact the security baseline of the Blackberry system.

STIG	Date
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide	2011-04-11

Details

Check Text ( C-32701r1_chk )
Detailed Policy Requirements: For this check, set IT Policy rule “Allow Web-Based Software Loading” (Wired Software Updates policy group) to “No." Check Procedures: This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule “Allow Web-Based Software Loading” (Wired Software Updates policy group) is set as required.

Check Text ( C-32701r1_chk )

Detailed Policy Requirements:

For this check, set IT Policy rule “Allow Web-Based Software Loading” (Wired Software Updates policy group) to “No."

Check Procedures:
This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify IT Policy rule “Allow Web-Based Software Loading” (Wired Software Updates policy group) is set as required.

Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.