| Configure the Samsung Android devices to enable authentication of personal hotspot connections to the device using a pre-shared key. |
On the management tool, in the device restrictions, set "Config tethering" to "Disallow".
If your deployment requires the use of Mobile Hotspot & Tethering, KPE policy can be used to allow its usage in a STIG approved configuration. In this case, do not configure this policy, and instead replace with KPE policy (innately by management tool or via KSP) "Allow open Wi-Fi connection" with value "Disable" and add Training Topic "Don't use Wi-Fi Sharing" (see supplemental document for additional information)