The BlackBerry MDS Integration Service must not be installed on a production BES.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-7078	WIR1305-01	SV-7462r3_rule		Medium

Description
The BlackBerry Enterprise Service MDS Integration Service is a software development platform and should not be installed on a production BES. The service, if not properly configured, can allow unsecured connections between the BlackBerry and BES and between the BES and back-office run-time application servers.

STIG	Date
BlackBerry Enterprise Server (version 5.x), Part 2 Security Technical Implementation Guide	2016-09-08

Details

Check Text ( C-17396r3_chk )
Detailed Policy Requirements: The MDS Integration Service must not be installed on a production BES. It should be installed only on a development or test BES when required for software development. Check Procedures: Check to see if the BlackBerry MDS Integration Service is installed on the production BES by looking at the left side of the BlackBerry Administration Server (BAS). Servers and components >> BlackBerry Solution topology >> BlackBerry Domain >> Component view. See if the “MDS Integration Service” is installed.

Check Text ( C-17396r3_chk )

Detailed Policy Requirements:

The MDS Integration Service must not be installed on a production BES. It should be installed only on a development or test BES when required for software development.

Check Procedures:

Check to see if the BlackBerry MDS Integration Service is installed on the production BES by looking at the left side of the BlackBerry Administration Server (BAS).

Servers and components >> BlackBerry Solution topology >> BlackBerry Domain >> Component view.

See if the “MDS Integration Service” is installed.

Fix Text (F-23363r1_fix)
The BlackBerry MDS Integration Service will not be installed on the BES.