The LG Android 5.0 platform must be configured to implement the management settings: disable Wi-Fi Direct.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-58827	LGA5-20-001703	SV-73257r1_rule		Medium

Description
Wi-Fi Direct allows the device to connect directly to another device via Wi-Fi without accessing a Wi-Fi access point and using DoD-required security mechanisms since Wi-Fi Direct can be used by applications to exchange files between devices. Disabling this feature mitigates the risk of compromising sensitive DoD data. Note: Disabling Wi-Fi Direct also disables Miracast. SFR ID: FTA_TAB.1.1

STIG	Date
LG Android 5.x Interim Security Configuration Guide	2015-09-22

Details

Check Text ( C-59671r2_chk )
This validation procedure is performed on both the MDM Administration Console and the LG Android device. Check whether the appropriate setting is configured on the MDM Administration Console: 1. Ask the MDM administrator to display the "Allow Wi-Fi Direct" setting in the MDM console. 2. Verify the setting for the Wi-Fi Direct is disabled. On the LG Android device: 1. Unlock the device 2. Open the device settings. 3. Navigate to the Wi-Fi Direct setting: Settings >> Wi-Fi >> Menu >> Advanced Wi-Fi >> click "Wi-Fi Direct" 4. Verify the Wi-Fi Direct is disabled and the following message is displayed: Wi-Fi Direct is disabled by server policy. If the "Allow Wi-Fi Direct" setting is enabled, or if the user is able to enable the setting on the device, this is a finding.

Check Text ( C-59671r2_chk )

This validation procedure is performed on both the MDM Administration Console and the LG Android device.

Check whether the appropriate setting is configured on the MDM Administration Console:
1. Ask the MDM administrator to display the "Allow Wi-Fi Direct" setting in the MDM console.
2. Verify the setting for the Wi-Fi Direct is disabled.

On the LG Android device:
1. Unlock the device
2. Open the device settings.
3. Navigate to the Wi-Fi Direct setting: Settings >> Wi-Fi >> Menu >> Advanced Wi-Fi >> click "Wi-Fi Direct"
4. Verify the Wi-Fi Direct is disabled and the following message is displayed:
Wi-Fi Direct is disabled by server policy.

If the "Allow Wi-Fi Direct" setting is enabled, or if the user is able to enable the setting on the device, this is a finding.

Fix Text (F-64211r1_fix)
Configure the mobile device to disable Wi-Fi Direct. On the MDM Administration Console, disable the "Allow Wi-Fi Direct" setting.