The network element must enforce requirements for the connection of mobile devices to organizational information systems.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
SRG-NET-000072-FW-NA	SRG-NET-000072-FW-NA	SRG-NET-000072-FW-NA_rule		Medium

Description
This control requires access control for portable and mobile devices. Mobile devices include portable storage media (e.g., USB memory sticks, external hard disk drives) and portable computing and communications devices with information storage capability (e.g., notebook/laptop computers, personal digital assistants, cellular telephones, digital cameras, audio recording devices). Unless restrictions are put in place, a user connecting to the enclave via a mobile device can access/perform everything as those connected via Ethernet. Enforcement requirements for the connection of mobile devices to organizational information systems are outside the scope of the firewall.

Description

This control requires access control for portable and mobile devices. Mobile devices include portable storage media (e.g., USB memory sticks, external hard disk drives) and portable computing and communications devices with information storage capability (e.g., notebook/laptop computers, personal digital assistants, cellular telephones, digital cameras, audio recording devices). Unless restrictions are put in place, a user connecting to the enclave via a mobile device can access/perform everything as those connected via Ethernet. Enforcement requirements for the connection of mobile devices to organizational information systems are outside the scope of the firewall.

STIG	Date
Firewall Security Requirements Guide	2012-12-10

Details

Check Text ( C-SRG-NET-000072-FW-NA_chk )
This requirement is NA for firewall. No fix required.

Fix Text (F-SRG-NET-000072-FW-NA_fix)
This requirement is NA for firewall. No fix required.