IT Policy rule Disable Data Exchange for Mobile Hotspot Mode must be set as required.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-37374 | WIR1435-02 | SV-49136r2_rule | ECSC-1 | Medium |
| Description |
|---|
| Sensitive DoD data could be exposed since data exchanged between CMDs connected to a hotspot is not encrypted. |
| STIG | Date |
|---|---|
| BlackBerry Enterprise Server (version 5.x), Part 3 Security Technical Implementation Guide | 2015-07-02 |
Details
| Check Text ( C-45622r2_chk ) |
|---|
| Detailed Policy Requirements: Set IT Policy rule "Disable Data Exchange for Mobile Hotspot Mode" (WLAN policy group) to "Yes". Check procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1400-01 (V0003545). Verify "Disable Data Exchange for Mobile Hotspot Mode" has been configured as required. |
| Fix Text (F-42299r1_fix) |
|---|
| Configure the IT Policy rule Disable Data Exchange for Mobile Hotspot Mode as specified in the "Checks" block. |