STIGQter: STIG Summary: Samsung Android OS 9 with Knox 3.x COBO Use Case KPE(Legacy) Deployment Security Technical Implementation Guide Version: 1 Release: 4 Benchmark Date: 24 Jul 2020:

Samsung Android must be configured to disallow outgoing beam.

DISA Rule

SV-103695r1_rule

Vulnerability Number

V-93609

Group Title

PP-MDF-991000

Rule Version

KNOX-09-000805

Severity

CAT II

CCI(s)

CCI-000366 - The organization implements the security configuration settings.

Weight

Fix Recommendation

Configure Samsung Android to disable Android beam.

On the MDM console, for the device, in the "Knox restrictions" group, select "disable android beam".

Check Contents

Review device configuration settings to confirm that Android beam is disabled.

This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox restrictions" group, verify that "disable android beam" is selected.

On the Samsung Android device, open a picture, contact, or webpage and put it back to back with an unlocked outgoing beam-enabled device. Verify that outgoing beam cannot be started.

If on the MDM console "disable android beam" is not selected, or on the Samsung Android device the user is able to successfully start outgoing beam, this is a finding.

Vulnerability Number

V-93609

Documentable

False

Rule Version

KNOX-09-000805

Severity Override Guidance

Check Content Reference

Target Key

3497

Samsung Android must be configured to disallow outgoing beam.

DISA Rule

Vulnerability Number

Group Title

Rule Version

Severity

CCI(s)

Weight

Fix Recommendation

Check Contents

Vulnerability Number

Documentable

Rule Version

Severity Override Guidance

Check Content Reference

Target Key

Comments