IT Policy rule “Disable WLAN” must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-16058	WIR1435-01	SV-17045r5_rule	ECSC-1	Low

Description
Improperly configured WLAN systems can expose the Blackberry device and DoD network to attack.

STIG	Date
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide	2011-09-30

Details

Check Text ( C-17398r4_chk )
Detail Policy Requirements: If BlackBerry Wi-Fi service is not authorized for use at the site, the following conditions apply: A BlackBerry WLAN IT policy has been set up for the site on the BES and is configured as shown in Table 1, BlackBerry STIG Configuration Tables. ***Set IT Policy rule “Disable WLAN“ (WLAN policy group) to “Yes" or TRUE.“ If WLAN use is authorized, set to "No" or "FALSE." Check procedures: This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). Interview the BES Administrator and determine if BlackBerry Wi-Fi is authorized. ***Verify “Disable WLAN“ has been configured as required.

Check Text ( C-17398r4_chk )

Detail Policy Requirements:

If BlackBerry Wi-Fi service is not authorized for use at the site, the following conditions apply: A BlackBerry WLAN IT policy has been set up for the site on the BES and is configured as shown in Table 1, BlackBerry STIG Configuration Tables.

*****Set IT Policy rule “Disable WLAN“ (WLAN policy group) to “Yes" or TRUE.“

If WLAN use is authorized, set to "No" or "FALSE."

Check procedures:

This is a BES IT Policy check. Recommend that all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

Interview the BES Administrator and determine if BlackBerry Wi-Fi is authorized.

*****Verify “Disable WLAN“ has been configured as required.

Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.