UCF STIG Viewer Logo

The mobile operating system's VPN client must use either IPSec or SSL/TLS when connecting to DoD networks.


Overview

Finding ID Version Rule ID IA Controls Severity
KNOX-13-002700 KNOX-13-002700 KNOX-13-002700_rule Medium
Description
Use of non-standard communications protocols can affect both the availability and confidentiality of communications. IPSec and SSL/TLS are both well-known and tested protocols that provide strong assurance with respect to both IA and interoperability.
STIG Date
Samsung Knox Android 1.0 STIG 2013-05-03

Details

Check Text ( C-KNOX-13-002700_chk )
This check procedure is performed using an MDM tool.

Check that the appropriate setting is configured on the MDM server.

For example, on the Fixmo Sentinel Administration Console:
1. Ask the administrator to display the "Disable Insecure VPN Connections" checkbox in the "Android Knox Restrictions" rule.
2. Verify the checkbox is selected.

If the "Disable Insecure VPN Connections" checkbox is not selected, this is a finding.
Fix Text (F-KNOX-13-002700_fix)
Configure the mobile operating system's VPN client to use IPSec or SSL/TLS when connecting to a DoD network.

For example, on the Fixmo Sentinel Administration Console, check the "Disable Insecure VPN Connections" checkbox in the "Android Knox Restrictions" rule.