Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
KNOX-13-002700 | KNOX-13-002700 | KNOX-13-002700_rule | Medium |
Description |
---|
Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability. |
STIG | Date |
---|---|
Samsung Knox Android 1.0 STIG | 2013-05-03 |
Check Text ( C-KNOX-13-002700_chk ) |
---|
This check procedure is performed using an MDM tool. Check that the appropriate setting is configured on the MDM server. For example, on the Fixmo Sentinel Administration Console: 1. Ask the administrator to display the "Disable Insecure VPN Connections" checkbox in the "Android Knox Restrictions" rule. 2. Verify the checkbox is selected. If the "Disable Insecure VPN Connections" checkbox is not selected, this is a finding. |
Fix Text (F-KNOX-13-002700_fix) |
---|
Configure the mobile operating system's VPN client to use IPSec or SSL/TLS when connecting to a DoD network. For example, on the Fixmo Sentinel Administration Console, check the "Disable Insecure VPN Connections" checkbox in the "Android Knox Restrictions" rule. |