The Good Mobility Suite server must configure the Good Mobility Suite agent to prohibit the download of applications on mobile operating system devices without system administrator control.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-53059 | GOOD-00-000490 | SV-67275r1_rule | Medium |
| Description |
|---|
| The installation and execution of unauthorized software on an operating system may allow the application to obtain sensitive information or further compromise the system. If the system administrator has control over what applications are downloaded, then the system administrator can check that only known good programs are installed, which significantly mitigates the risk posed by malicious software. |
| STIG | Date |
|---|---|
| Good for Enterprise 8.x Security Technical Implementation Guide | 2014-08-18 |
Details
| Check Text ( C-54563r1_chk ) |
|---|
| Review the Good Mobility Suite server configuration to determine if the Good Mobility Suite agent prohibits the download of applications on mobile operating system devices without administrator control. If this function is not present, this is a finding. |
| Fix Text (F-57869r3_fix) |
|---|
| Configure the Good Mobility Suite so the Good Mobility Suite agent is configured to prohibit the download of applications on mobile operating system devices without system administrator control. -Launch the Good Mobile Control Web console and click on the Policies tab -Select the policy set for the smart phone and select the iOS Management tab -Verify Enable iOS Configuration is checked -select the Restrictions under iOS Management tab -Verify Allow use of iTunes Music Store is Unchecked |