IT Policy rule “Disable WLAN” must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-16058	WIR1435-01	SV-17045r6_rule	ECSC-1	Low

Description
Improperly configured WLAN systems can expose the BlackBerry device and DoD network to attack.

STIG	Date
BlackBerry Enterprise Server, Part 3 Security Technical Implementation Guide	2012-02-02

Details

Check Text ( C-17398r5_chk )
Detail Policy Requirements: If BlackBerry Wi-Fi service is not authorized for use at the site, the following conditions apply: A BlackBerry WLAN IT policy has been set up for the site on the BES and is configured as shown in Table 1, BlackBerry STIG Configuration Tables. ***Set IT Policy rule “Disable WLAN" (WLAN policy group) to “Yes". If WLAN use is authorized, set to "No". Check procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). Interview the BES Administrator and determine if BlackBerry Wi-Fi is authorized. ***Verify “Disable WLAN" has been configured as required.

Check Text ( C-17398r5_chk )

Detail Policy Requirements:

If BlackBerry Wi-Fi service is not authorized for use at the site, the following conditions apply: A BlackBerry WLAN IT policy has been set up for the site on the BES and is configured as shown in Table 1, BlackBerry STIG Configuration Tables.

*****Set IT Policy rule “Disable WLAN" (WLAN policy group) to “Yes".

If WLAN use is authorized, set to "No".

Check procedures:

This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545).

Interview the BES Administrator and determine if BlackBerry Wi-Fi is authorized.

*****Verify “Disable WLAN" has been configured as required.

Fix Text (F-23386r1_fix)
Configure the IT Policy rule as specified in the "Checks" block.