UCF STIG Viewer Logo

Google Android 12 must be configured to disable ad hoc wireless client-to-client connection capability.


Overview

Finding ID Version Rule ID IA Controls Severity
V-250438 GOOG-12-009500 SV-250438r802788_rule Medium
Description
Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow the exposure of sensitive DoD data and increase the risk of downloading and installing malware of the DoD mobile device. SFR ID: FMT_SMF_EXT.1.1/WLAN
STIG Date
Google Android 12 COPE Security Technical Implementation Guide 2021-09-17

Details

Check Text ( C-53873r802676_chk )
Review the managed Google Android 12 device configuration settings to determine if the mobile device is configured to disable ad hoc wireless client-to-client connection capability.

This validation procedure is performed on both the MDM Administration console and the managed Google Android 12 device.

On the MDM console:

COBO:

1. Open "Settings Management".
2. Verify that "Set location" is toggled to OFF.

COPE:

1. Open "User restrictions on parent".
2. Verify that "Disallow config location" is toggled to ON.
3. Verify that "Disallow share location" is toggled to ON.

On the managed Google Android 12 device:

COBO and COPE:

1. Go to Settings >> Network & Internet >> Network preferences.
2. Verify that "Wi-Fi Direct" is greyed out and unavailable.

If the EMM console device policy is not set to disable Location sharing and configuration, this is a finding.
Fix Text (F-53827r802787_fix)
Configure the Google Android 12 device to disable ad hoc wireless client-to-client connection capability.

On the MDM console:

COBO:

1. Open "Settings Management".
2. Toggle "Set location" to OFF.

COPE:

1. Open "User restrictions on parent".
2. Toggle "Disallow config location" to ON.
3. Toggle "Disallow share location" to ON.

Note: Wi-Fi Direct and ad hoc requires Location services to function; therefore, disabling this setting will disable the ad hoc and Wi-Fi Direct feature.