The Samsung KNOX for Android platform must be configured to disable Nearby devices.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-69639	KNOX-35-023500	SV-84261r1_rule		Medium

Description
The Nearby devices feature allows the user to share files with other devices that are connected on the same Wi-Fi access point using the Digital Living Network Alliance (DLNA) technology. Even though the user must allow requests from other devices, this feature can potentially result in unauthorized access to and compromise of sensitive DoD files. Disabling this feature will mitigate this risk. SFR ID: FMT_SMF_EXT.1.1 #45

Description

The Nearby devices feature allows the user to share files with other devices that are connected on the same Wi-Fi access point using the Digital Living Network Alliance (DLNA) technology. Even though the user must allow requests from other devices, this feature can potentially result in unauthorized access to and compromise of sensitive DoD files. Disabling this feature will mitigate this risk. SFR ID: FMT_SMF_EXT.1.1 #45

STIG	Date
Samsung Android OS 6 (with KNOX 2.x) Security Technical Implementation Guide	2016-11-14

Details

Check Text ( C-70075r1_chk )
This validation procedure is performed on the Samsung KNOX for Android device. On the Samsung KNOX for Android device: 1. Open the device settings. 2. Select "More connection settings". 3. Select "Nearby devices". 4. Verify this is disabled. If the setting is enabled and cannot be disabled, this is a finding. Note: This setting cannot be managed by the MDM administrator and is a User Based Enforcement (UBE) requirement.

Check Text ( C-70075r1_chk )

This validation procedure is performed on the Samsung KNOX for Android device.

On the Samsung KNOX for Android device:
1. Open the device settings.
2. Select "More connection settings".
3. Select "Nearby devices".
4. Verify this is disabled.

If the setting is enabled and cannot be disabled, this is a finding.

Note: This setting cannot be managed by the MDM administrator and is a User Based Enforcement (UBE) requirement.

Fix Text (F-75829r1_fix)
Configure the mobile operating system to disable "Nearby devices". Note: Most carriers have removed this feature. If the feature is not present as described, this requirement is Not Applicable (NA).