Google Android 14 must be configured to disable ad hoc wireless client-to-client connection capability.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-258428	GOOG-14-009500	SV-258428r987886_rule		Medium

Description
Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow the exposure of sensitive DOD data and increase the risk of downloading and installing malware of the DOD mobile device. SFR ID: FMT_SMF_EXT.1.1/WLAN

STIG	Date
Google Android 14 COPE Security Technical Implementation Guide	2024-06-05

Details

Check Text ( C-62169r928307_chk )
Review the managed Google Android 14 device configuration settings to determine if the mobile device is configured to disable ad hoc wireless client-to-client connection capability. This validation procedure is performed on both the MDM Administration Console and the managed Google Android 14 device. On the MDM console: COBO: 1. Open "Settings Management". 2. Verify "Set location" is toggled to "OFF". COPE: 1. Open "User restrictions on parent". 2. Verify "Disallow config location" is toggled to "ON". 3. Verify "Disallow share location" is toggled to "ON". On the managed Google Android 14 device: COBO and COPE: 1. Go to Settings >> Network & Internet >> Internet >> Network preferences. 2. Verify "Wi-Fi Direct" is greyed out and unavailable. If the EMM console device policy is not set to disable Location sharing and configuration, this is a finding.

Check Text ( C-62169r928307_chk )

Review the managed Google Android 14 device configuration settings to determine if the mobile device is configured to disable ad hoc wireless client-to-client connection capability.

This validation procedure is performed on both the MDM Administration Console and the managed Google Android 14 device.

On the MDM console:

COBO:

1. Open "Settings Management".
2. Verify "Set location" is toggled to "OFF".

COPE:

1. Open "User restrictions on parent".
2. Verify "Disallow config location" is toggled to "ON".
3. Verify "Disallow share location" is toggled to "ON".

On the managed Google Android 14 device:

COBO and COPE:

1. Go to Settings >> Network & Internet >> Internet >> Network preferences.
2. Verify "Wi-Fi Direct" is greyed out and unavailable.

If the EMM console device policy is not set to disable Location sharing and configuration, this is a finding.

Fix Text (F-62093r928308_fix)
Configure the Google Android 14 device to disable ad hoc wireless client-to-client connection capability. On the MDM console: COBO: 1. Open "Settings Management". 2. Toggle "Set location" to "OFF". COPE: 1. Open "User restrictions on parent". 2. Toggle "Disallow config location" to "ON". 3. Toggle "Disallow share location" to "ON". Note: Ad hoc and Wi-Fi Direct requires Location services to function; therefore, disabling this setting will disable the ad hoc and Wi-Fi Direct feature.

Fix Text (F-62093r928308_fix)

Configure the Google Android 14 device to disable ad hoc wireless client-to-client connection capability.

On the MDM console:

COBO:

1. Open "Settings Management".
2. Toggle "Set location" to "OFF".

COPE:

1. Open "User restrictions on parent".
2. Toggle "Disallow config location" to "ON".
3. Toggle "Disallow share location" to "ON".

Note: Ad hoc and Wi-Fi Direct requires Location services to function; therefore, disabling this setting will disable the ad hoc and Wi-Fi Direct feature.