The MobileIron Core MDM agent must be configured for the periodicity of reachability events for six hours or less.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-70541	MICR-9X-120100	SV-85163r2_rule		Low

Description
Mobile devices that do not enforce security policy or verify the status of the device are vulnerable to a variety of attacks. The key security function of MDM technology is to distribute mobile device security polices in such a manner that they are enforced on managed mobile devices. To accomplish this function, the MDM agent must verify the status and other key information of the managed device and report that status to the MDM server periodically. SFR ID: FMT_SMF_EXT.3.2

Description

Mobile devices that do not enforce security policy or verify the status of the device are vulnerable to a variety of attacks. The key security function of MDM technology is to distribute mobile device security polices in such a manner that they are enforced on managed mobile devices. To accomplish this function, the MDM agent must verify the status and other key information of the managed device and report that status to the MDM server periodically. SFR ID: FMT_SMF_EXT.3.2

STIG	Date
MobileIron Core v9.x MDM Security Technical Implementation Guide	2019-05-06

Details

Check Text ( C-70941r2_chk )
Configure the MobileIron Core Server for the periodicity of reachability events for six hours or less. 1. Log into the MobileIron Core Server Admin Portal using a web browser. 2. Select "Policies & Configs" on the web page. 3. Select "Policies" on the web page. 4. Select each applicable Sync policy on the web page. 5. Examine the Sync Interval in each case to ensure it is less than six hours as required. If the Sync Interval is more than six hours for any Sync policy, this is a finding.

Check Text ( C-70941r2_chk )

Configure the MobileIron Core Server for the periodicity of reachability events for six hours or less.

1. Log into the MobileIron Core Server Admin Portal using a web browser.
2. Select "Policies & Configs" on the web page.
3. Select "Policies" on the web page.
4. Select each applicable Sync policy on the web page.
5. Examine the Sync Interval in each case to ensure it is less than six hours as required.

If the Sync Interval is more than six hours for any Sync policy, this is a finding.

Fix Text (F-76779r2_fix)
Configure the MobileIron Core Server for the periodicity of reachability events for six hours or less. 1. Log into the MobileIron Core Server Admin Portal using a web browser. 2. Select "Policies & Configs" on the web page. 3. Select "Policies" on the web page. 4. Select and edit each applicable Sync policy on the web page. 5. Set the Sync Interval in each case to six hours or less as required.