Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-36155 | SRG-APP-159-MDM-154-MDM | SV-47559r1_rule | Medium |
Description |
---|
Device authentication is a solution enabling an organization to manage devices. Without the authentication, there is risk of a rogue device being serviced by an MDM server. |
STIG | Date |
---|---|
Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Check Text ( C-44395r1_chk ) |
---|
Review the MDM server configuration to ensure the MDM server authenticates devices before establishing remote network connections using bidirectional cryptographically based authentication between devices. If this function is not performed, this is a finding. |
Fix Text (F-40685r1_fix) |
---|
Configure the MDM server to authenticate devices before establishing remote network connections using bidirectional cryptographically based authentication between devices. |