Google Android 13 must be configured to disable ad hoc wireless client-to-client connection capability.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-254784	GOOG-13-009500	SV-254784r987886_rule		Medium

Description
Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow the exposure of sensitive DOD data and increase the risk of downloading and installing malware of the DOD mobile device. SFR ID: FMT_SMF_EXT.1.1/WLAN

STIG	Date
Google Android 13 COPE Security Technical Implementation Guide	2024-06-05

Details

Check Text ( C-58395r862732_chk )
Review the managed Google Android 13 device configuration settings to determine if the mobile device is configured to disable ad hoc wireless client-to-client connection capability. This validation procedure is performed on both the MDM Administration console and the managed Google Android 13 device. On the MDM console: COBO: 1. Open "Settings Management". 2. Verify "Set location" is toggled to "OFF". COPE: 1. Open "User restrictions on parent". 2. Verify "Disallow config location" is toggled to "ON". 3. Verify "Disallow share location" is toggled to "ON". On the managed Google Android 13 device: COBO and COPE: 1. Go to Settings >> Network & Internet >> Network preferences. 2. Verify "Wi-Fi Direct" is greyed out and unavailable. If the EMM console device policy is not set to disable Location sharing and configuration, this is a finding.

Check Text ( C-58395r862732_chk )

Review the managed Google Android 13 device configuration settings to determine if the mobile device is configured to disable ad hoc wireless client-to-client connection capability.

This validation procedure is performed on both the MDM Administration console and the managed Google Android 13 device.

On the MDM console:

COBO:

1. Open "Settings Management".
2. Verify "Set location" is toggled to "OFF".

COPE:

1. Open "User restrictions on parent".
2. Verify "Disallow config location" is toggled to "ON".
3. Verify "Disallow share location" is toggled to "ON".

On the managed Google Android 13 device:

COBO and COPE:

1. Go to Settings >> Network & Internet >> Network preferences.
2. Verify "Wi-Fi Direct" is greyed out and unavailable.

If the EMM console device policy is not set to disable Location sharing and configuration, this is a finding.

Fix Text (F-58341r862733_fix)
Configure the Google Android 13 device to disable ad hoc wireless client-to-client connection capability. On the MDM console: COBO: 1. Open "Settings Management". 2. Toggle "Set location" to "OFF". COPE: 1. Open "User restrictions on parent". 2. Toggle "Disallow config location" to "ON". 3. Toggle "Disallow share location" to "ON". Note: Ad hoc and Wi-Fi Direct requires Location services to function; therefore, disabling this setting will disable the ad hoc and Wi-Fi Direct feature.

Fix Text (F-58341r862733_fix)

Configure the Google Android 13 device to disable ad hoc wireless client-to-client connection capability.

On the MDM console:

COBO:

1. Open "Settings Management".
2. Toggle "Set location" to "OFF".

COPE:

1. Open "User restrictions on parent".
2. Toggle "Disallow config location" to "ON".
3. Toggle "Disallow share location" to "ON".

Note: Ad hoc and Wi-Fi Direct requires Location services to function; therefore, disabling this setting will disable the ad hoc and Wi-Fi Direct feature.