BES IT Policy rule must be configured as required. IT Policy rule Disable Activation With Public BlackBerry MDS Integration Service (BlackBerry MDS Integration Service policy group) must be set as required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-19740 | WIR1450-25 | SV-21886r4_rule | ECSC-1 | Medium |
| Description |
|---|
| User can connect to public BlackBerry MDS Integration Services to access public content, web, and application servers. These servers are not DoD-approved and may contain malware that could be downloaded on a BlackBerry and transferred to the DoD enclave. |
| STIG | Date |
|---|---|
| BlackBerry Enterprise Server (version 5.x), Part 3 Security Technical Implementation Guide | 2015-07-02 |
Details
| Check Text ( C-24183r4_chk ) |
|---|
| Detailed Policy Requirements: Access to Public BlackBerry MDS Integration Services will be blocked. *****For this check, set IT Policy rule "Disable Activation With Public BlackBerry MDS Integration Service" (BlackBerry MDS Integration Service policy group) to "Yes". Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). *****Verify IT Policy rule "Disable Activation With Public BlackBerry MDS Integration Service" (BlackBerry MDS Integration Service policy group) is set as required. If not set as required, this is a finding. |
| Fix Text (F-23386r4_fix) |
|---|
| Configure the IT Policy rule as specified in the "Checks" block. |