IT Policy rule “Allow Discovery by User” (MDS Integration Service policy group) must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-22048	WIR1450-39	SV-25479r1_rule	ECWN-1	Medium

Description
This rule allows a user to search for and install BlackBerry MDS Runtime Applications on a BlackBerry device. This could lead to the installation of unapproved applications and possible malware.

STIG	Date
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide	2011-07-14

Details

Check Text ( C-26999r1_chk )
Detailed Policy Requirements: Only DoD approved applications will be used. ***For this check, set IT Policy rule “Allow Discovery by User” (MDS Integration Service policy group) to “No” or “FALSE.” Check Procedures: This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). ***Verify IT Policy “Allow Discovery by User” (MDS Integration Service policy group) is set as required.

Check Text ( C-26999r1_chk )

Detailed Policy Requirements:
Only DoD approved applications will be used.

*****For this check, set IT Policy rule “Allow Discovery by User” (MDS Integration Service policy group) to “No” or “FALSE.”

Check Procedures:
This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

*****Verify IT Policy “Allow Discovery by User” (MDS Integration Service policy group) is set as required.

Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.