STIGQter: STIG Summary: MobileIron Core v10.x MDM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 15 Feb 2019:

The MobileIron Core v10 server or platform must be configured to initiate a session lock after a 15-minute period of inactivity.

DISA Rule

SV-101911r1_rule

Vulnerability Number

V-91809

Group Title

PP-MDM-311047

Rule Version

MICR-10-000450

Severity

CAT II

CCI(s)

• CCI-000057 - The information system initiates a session lock after the organization-defined time period of inactivity.

Weight

10

Fix Recommendation

Configure the MDM server or platform to lock the server after 15-minutes of inactivity.

In the Admin Portal, go to Settings >> General >> Timeout.

From the dropdown menu, choose a timeout value of "5-", "10-", or "15-minutes".

Check Contents

Review the MDM server or platform configuration.

Verify the server is configured to lock after "15-minutes or less" of inactivity. You will see the current value for the session timeout, in minutes.

If, in the Admin Portal, Settings >> General >> Timeout is not set to "15-minutes or less", this is a finding.

Vulnerability Number

V-91809

Documentable

False

Rule Version

MICR-10-000450

Severity Override Guidance

Review the MDM server or platform configuration.

Verify the server is configured to lock after "15-minutes or less" of inactivity. You will see the current value for the session timeout, in minutes.

If, in the Admin Portal, Settings >> General >> Timeout is not set to "15-minutes or less", this is a finding.

Check Content Reference

M

Target Key

3433

Comments