The Good Mobility Suite must transfer audit logs from managed mobile devices to the Good Mobility Suite.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-53099	GOOD-00-000030	SV-67315r1_rule		High

Description
Good Mobility Suite auditing capability is critical for accurate forensic analysis. The ability to transfer audit logs often is necessary to quickly isolate them, protect their integrity, and analyze their contents.

STIG	Date
Good for Enterprise 8.x Security Technical Implementation Guide	2014-08-18

Details

Check Text ( C-54603r1_chk )
Review the Good Mobility Suite mobile device account configuration to verify the audit logs can be transferred from managed mobile devices to the Good Mobility Suite. Have the system administrator show the logs of managed mobile devices on the Good Mobility Suite and whether audit logs are being transferred on request or on a period schedule. Otherwise, this is a finding.

Fix Text (F-57909r1_fix)

Configure the Good Mobility Suite to transfer audit logs from managed mobile devices to the Good Mobility Suite. -Good Logs are saved in standard .log format. The Default location for these logs are in the Good install directory (C:/Program Files (x86)/Good Technology/Good Mobile Control) Log Directory. This allows data to be consumed by any third-party SYSLog tool. Please refer to Third-Party Documentation to configure required Alerts/Notification. - To Enable Good Mobile Messaging Server Diagnostic Logging, the following 3 Registry entries must be configured as String Values. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoodLinkServer\parameters\diagnostics "cachesize" = 0 "encrypt" = 0 "expand" = 1