The MDM server must enforce requirements for remote connections to the information system.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-36020	SRG-APP-140-MDM-015-SRV	SV-47409r1_rule		High

Description
The organization will define the requirements for connection of remote connections. In order to ensure the connection provides adequate integrity and confidentiality of the connection, the MDM server must enforce these requirements. This rule requires explicit authorization prior to allowing remote access to an information system without specifying a specific format for that authorization. For example, while the organization may deem it appropriate to use a system interconnection agreement to authorize a given remote access, such agreements are not required by this rule.

Description

The organization will define the requirements for connection of remote connections. In order to ensure the connection provides adequate integrity and confidentiality of the connection, the MDM server must enforce these requirements. This rule requires explicit authorization prior to allowing remote access to an information system without specifying a specific format for that authorization. For example, while the organization may deem it appropriate to use a system interconnection agreement to authorize a given remote access, such agreements are not required by this rule.

STIG	Date
Mobile Device Manager Security Requirements Guide	2013-01-24

Details

Check Text ( C-44259r1_chk )
Review the MDM server configuration to determine whether the system enforces the requirements for remote connections. If the system is not enforcing these requirements, or the remote connection settings are not in accordance with the requirements, this is a finding.

Fix Text (F-40550r1_fix)
Configure the MDM server to enforce the requirements for remote connections.