The Samsung SDS EMM must be configured with a periodicity for reachable events of six hours or less for the following commands to the agent: - query connectivity status; - query the current version of the MD firmware/software; - query the current version of installed mobile applications;

The Samsung SDS EMM must be configured with a periodicity for reachable events of six hours or less for the following commands to the agent: - query connectivity status; - query the current version of the MD firmware/software; - query the current version of installed mobile applications; - read audit logs kept by the MD.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-225645	SSDS-00-000550	SV-225645r547722_rule		Medium

Description
Key security-related status attributes must be queried frequently so the Samsung SDS EMM can report status of devices under management to the administrator and management. The frequency of these queries must be configured to an acceptable timeframe. Six hours or less is considered acceptable for normal operations. SFR ID: FMT_SMF.1.1(2) c.3

STIG	Date
Samsung SDS EMM Security Technical Implementation Guide	2020-09-16

Details

Check Text ( C-27346r547720_chk )
Review the MDM agent configuration settings to determine if the agent is configured with a periodicity of reachable events set to six hours or less. This validation procedure is performed on the Samsung SDS EMM Server Admin Console. 1. Log in to the Samsung SDS EMM Server Admin Console using a web browser. 2. Go to Setting >> Server >> Configuration. 3. For Android: On row 27 verify "Inventory Collection Period for Android (hr)" is set to "6" or less. 4. For iOS: On row 28 verify "Inventory Collection Period for iOS (hr)" is set to "6" or less. If the periodicity of reachable events is not set to "6" hours or less, this is a finding.

Check Text ( C-27346r547720_chk )

Review the MDM agent configuration settings to determine if the agent is configured with a periodicity of reachable events set to six hours or less.

This validation procedure is performed on the Samsung SDS EMM Server Admin Console.
1. Log in to the Samsung SDS EMM Server Admin Console using a web browser.
2. Go to Setting >> Server >> Configuration.
3. For Android: On row 27 verify "Inventory Collection Period for Android (hr)" is set to "6" or less.
4. For iOS: On row 28 verify "Inventory Collection Period for iOS (hr)" is set to "6" or less.

If the periodicity of reachable events is not set to "6" hours or less, this is a finding.

Fix Text (F-27334r547721_fix)
Configure the MDM agent periodicity of reachable events to six hours or less. On the MDM console, do the following: 1. Log in to the Samsung SDS EMM Server Admin Console using a web browser. 2. Go to Settings >> Server >> Configuration. 3. For Android: Ensure that row 27 "Inventory Collection Period for Android (hr)" shows a value of "6" or less. 4. For iOS: Ensure that row 28 "Inventory Collection Period for iOS (hr)" shows a value of "6" or less. 5. Click on the check-mark box in the top left of the "Configuration" screen to "Apply Changes". 6. Click "OK" on the "Notify" save completed window.

Fix Text (F-27334r547721_fix)

Configure the MDM agent periodicity of reachable events to six hours or less.

On the MDM console, do the following:
1. Log in to the Samsung SDS EMM Server Admin Console using a web browser.
2. Go to Settings >> Server >> Configuration.
3. For Android: Ensure that row 27 "Inventory Collection Period for Android (hr)" shows a value of "6" or less.
4. For iOS: Ensure that row 28 "Inventory Collection Period for iOS (hr)" shows a value of "6" or less.
5. Click on the check-mark box in the top left of the "Configuration" screen to "Apply Changes".
6. Click "OK" on the "Notify" save completed window.