UCF STIG Viewer Logo

Application repositories set up on the BES must be DoD-approved.


Finding ID Version Rule ID IA Controls Severity
V-22055 WIR1345-01 SV-25491r2_rule Medium
A DoD application repository must contain only authorized applications and only approved and unaltered versions of those applications. If DoD-approved application repositories are not used, the integrity of applications in the repository would be unknown.
BlackBerry Enterprise Server (version 5.x), Part 2 Security Technical Implementation Guide 2016-09-08


Check Text ( C-27006r2_chk )
If no application repositories are set up, this check is Not Applicable. Talk to the site BES administrator. Determine if the site has set up an application repository. If yes, verify the repository is DoD-approved. If the repository is not DoD-approved, this is a finding.
Fix Text (F-23380r1_fix)
Application repositories will be located on a DoD-controlled server within a DoD enclave.