Required security controls must be used when BlackBerry Wi-Fi is used by the site to connect to a DoD Wi-Fi network. Required security controls are in Table 2, BlackBerry STIG Configuration Tables.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19224	WIR1325-01	SV-21113r2_rule	ECWN-1	Low

Description
If BlackBerry Wi-Fi controls are not implemented, DoD data can be compromised.

STIG	Date
BlackBerry Enterprise Server (version 5.x), Part 2 Security Technical Implementation Guide	2014-10-08

Details

Check Text ( C-23162r2_chk )
Ask the BlackBerry system administrator if the site uses BlackBerry Wi-Fi to connect to DoD WLAN. If yes, verify the following actions have occurred. 1. Determine which BlackBerry users have been approved to use BlackBerry Wi-Fi to connect to the DoD WLAN. Ask the IAO or BlackBerry SA for names of site BlackBerry users that have been authorized to use BlackBerry Wi-Fi Service. 2. Verify these users have been assigned a WLAN Configuration Set (profile). Verify that authorized users have been assigned a WLAN profile as follows (select two or three users to check). - On the BAS, in the BlackBerry solution management box, expand “User” and click on “Manage users”. Then, click on search in the center screen. A list of all users assigned to the BES will be available. - Click the user account to verify a WLAN profile has been assigned. - Click on the WLAN configuration tab. - Look to see the name of the WLAN configuration (profile) that has been assigned to the user (if any). -Verify each assigned WLAN Configuration Set (profile) is configured as required. The required configuration is listed in Table C-2 of the BlackBerry STIG Overview (see procedure below). 3. Verify each assigned WLAN Configuration Set (profile) is configured as required. The required configuration is listed in Table C-2 of the BlackBerry STIG Overview (see procedure below). Mark as a finding if any user accounts authorized for WLAN do not have a WLAN configuration assigned to the account. The setup of each WLAN Configuration Set on the BES can be viewed as follows. - BAS > BlackBerry solution management box > Policy > WLAN configuration > Manage WLAN configurations. - For each listed WLAN configuration to be checked, click on the configuration, then click on the WLAN configuration data tab. - Verify rules are set as shown in Table C-2 (only rules with “Required” settings need to be verified). Mark as a finding if the WLAN profile has not been configured as required.

Check Text ( C-23162r2_chk )

Ask the BlackBerry system administrator if the site uses BlackBerry Wi-Fi to connect to DoD WLAN. If yes, verify the following actions have occurred.

1. Determine which BlackBerry users have been approved to use BlackBerry Wi-Fi to connect to the DoD WLAN. Ask the IAO or BlackBerry SA for names of site BlackBerry users that have been authorized to use BlackBerry Wi-Fi Service.

2. Verify these users have been assigned a WLAN Configuration Set (profile). Verify that authorized users have been assigned a WLAN profile as follows (select two or three users to check).

- On the BAS, in the BlackBerry solution management box, expand “User” and click on “Manage users”. Then, click on search in the center screen. A list of all users assigned to the BES will be available.
- Click the user account to verify a WLAN profile has been assigned.
- Click on the WLAN configuration tab.
- Look to see the name of the WLAN configuration (profile) that has been assigned to the user (if any).
-Verify each assigned WLAN Configuration Set (profile) is configured as required. The required configuration is listed in Table C-2 of the BlackBerry STIG Overview (see procedure below).

3. Verify each assigned WLAN Configuration Set (profile) is configured as required. The required configuration is listed in Table C-2 of the BlackBerry STIG Overview (see procedure below).

Mark as a finding if any user accounts authorized for WLAN do not have a WLAN configuration assigned to the account.

The setup of each WLAN Configuration Set on the BES can be viewed as follows.

- BAS > BlackBerry solution management box > Policy > WLAN configuration > Manage WLAN configurations.
- For each listed WLAN configuration to be checked, click on the configuration, then click on the WLAN configuration data tab.
- Verify rules are set as shown in Table C-2 (only rules with “Required” settings need to be verified).

Mark as a finding if the WLAN profile has not been configured as required.

Fix Text (F-23376r1_fix)
Required security controls used when BlackBerry Wi-Fi is used by the site to connect to a DoD Wi-Fi network.