The smartphone management server must be configured to control HTML and RTF formatted email.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24977	WIR-WMS-GD-006	SV-30818r1_rule	ECWN-1	Low

Description
HTML email and inline images in email can contain malware or links to web sites with malware.

STIG	Date
Good Mobility Suite Server (Android OS) Security Technical Implementation Guide	2011-12-14

Details

Check Text ( C-31238r1_chk )
Detailed Requirements: - Convert HTML and RTF formatted email into text format before sending to a smartphone. - Prevent the smartphone management server from sending email messages with inline images to smartphones. Verify the following Windows registry setting is set on the Good server: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoodLinkServer\parameters\sync] "htmlEmail"="1" Mark as a finding if the Windows registry key is not configured as required.

Check Text ( C-31238r1_chk )

Detailed Requirements:
- Convert HTML and RTF formatted email into text format before sending to a smartphone.
- Prevent the smartphone management server from sending email messages with inline images to smartphones.

Verify the following Windows registry setting is set on the Good server:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoodLinkServer\parameters\sync]
"htmlEmail"="1"

Mark as a finding if the Windows registry key is not configured as required.

Fix Text (F-27618r1_fix)
Configure the smartphone management server to: - Convert HTML and RTF formatted email into text format before sending to a smartphone. - Prevent the smartphone management server from sending email messages with inline images to smartphones.