Application repositories set up on the BES must be DoD-approved.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-22055 | WIR1345-01 | SV-25491r2_rule | Medium |
| Description |
|---|
| A DoD application repository must contain only authorized applications and only approved and unaltered versions of those applications. If DoD-approved application repositories are not used, the integrity of applications in the repository would be unknown. |
| STIG | Date |
|---|---|
| BlackBerry Enterprise Server (version 5.x), Part 2 Security Technical Implementation Guide | 2016-09-08 |
Details
| Check Text ( C-27006r2_chk ) |
|---|
| If no application repositories are set up, this check is Not Applicable. Talk to the site BES administrator. Determine if the site has set up an application repository. If yes, verify the repository is DoD-approved. If the repository is not DoD-approved, this is a finding. |
| Fix Text (F-23380r1_fix) |
|---|
| Application repositories will be located on a DoD-controlled server within a DoD enclave. |