UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The MDM server must provide transaction recovery to avoid disabling the CMD in the event of an incomplete policy push.


Overview

Finding ID Version Rule ID IA Controls Severity
V-36350 SRG-APP-144-MDM-287-MDIS SV-47754r1_rule High
Description
Since the MDM server controls many mobile devices as well as serving as a gateway into the network infrastructure, the absence of this feature could also enable an adversary to launch an enterprise-wide DoS attack.
STIG Date
Mobile Device Manager Security Requirements Guide 2013-01-24

Details

Check Text ( C-44592r1_chk )
Review MDM server documentation and determine if the MDM server provides transaction recovery to avoid disabling the CMD in the event of an incomplete policy push. If the MDM server does not provide transaction recovery to avoid disabling the CMD in the event of an incomplete policy push, this is a finding.
Fix Text (F-40882r1_fix)
Configure the MDM server to provide transaction recovery to avoid disabling the CMD in the event of an incomplete policy push.