Changes are coming to https://stigviewer.com.
Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey
For those instances where the organization requires encrypted traffic to be visible to information system monitoring tools, the application transmitting the encrypted traffic must make provisions to allow that traffic to be visible to specific system monitoring.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
|---|---|---|---|---|
| V-36286 | SRG-APP-282-NA | SV-47690r1_rule | Medium |
| Description |
|---|
| There is a recognized need to balance encrypting traffic versus the need to have insight into the traffic from a monitoring perspective. Rationale for non-applicability: The MDM server traffic between the server and mobile device cannot be monitored. This is a feature of an MDM server. |
| STIG | Date |
|---|---|
| Mobile Device Manager Security Requirements Guide | 2013-01-24 |
Details
| Check Text ( C-44526r1_chk ) |
|---|
| This requirement is NA for the MDM server SRG. |
| Fix Text (F-40816r1_fix) |
|---|
| The requirement is NA. No fix is required. |