IT Policy rule “Maximum Bluetooth Range (BlackBerry Smart Card Reader policy group) must be set as required.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-19315	WIR1410-01	SV-21232r2_rule	ECSC-1	Low

Description
Insecure Bluetooth SCR could make the BlackBerry vulnerable to compromise via a Bluetooth attack.

STIG	Date
BlackBerry Enterprise Server (version 5.x), Part 3 Security Technical Implementation Guide	2013-06-21

Details

Check Text ( C-23358r2_chk )
Detailed Policy Requirements: ***For this check, set IT Policy rule “Maximum Bluetooth Range" (BlackBerry SCR policy group) to “50% or less” Check Procedures: This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1100-01 (V0003545). ***Verify IT Policy rule “Maximum Bluetooth Range" (BlackBerry SCR policy group) is set as required. Note: The correct setting can also be verified on the handheld: See “Reader Setting – Bluetooth Range” in Table 5, BlackBerry STIG Configuration Tables. Verifying the correct setting on the BES is the preferred procedure.

Check Text ( C-23358r2_chk )

Detailed Policy Requirements:

*****For this check, set IT Policy rule “Maximum Bluetooth Range" (BlackBerry SCR policy group) to “50% or less”

Check Procedures:

This is a BES IT Policy check. Recommend all checks related to BES IT policies be reviewed using the procedure in Check WIR1100-01 (V0003545).

*****Verify IT Policy rule “Maximum Bluetooth Range" (BlackBerry SCR policy group) is set as required.

Note: The correct setting can also be verified on the handheld: See “Reader Setting – Bluetooth Range” in Table 5, BlackBerry STIG Configuration Tables. Verifying the correct setting on the BES is the preferred procedure.

Fix Text (F-23386r2_fix)
Configure the IT Policy rule Require FIPS Ciphers as specified in the "Checks" block.