STIGQter: STIG Summary: Samsung SDS EMM Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 11 Sep 2020:

The Samsung SDS EMM must be configured to transfer Samsung SDS EMM logs to another server for storage, analysis, and reporting. Note: Samsung SDS EMM logs include logs of MDM events and logs transferred to the Samsung SDS EMM by MDM agents of managed devices.

DISA Rule

SV-225643r547716_rule

Vulnerability Number

V-225643

Group Title

PP-MDM-411054

Rule Version

SSDS-00-000510

Severity

CAT II

CCI(s)

• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

Configure the Samsung SDS EMM to transfer Samsung SDS EMM logs to another server for storage, analysis, and reporting.

On the MDM console, do the following:
1. Go to Setting >> Server >> Configuration.
2. Click "Audit" at the top of the window and enter the audit log server and other information.

Check Contents

Review the Samsung SDS EMM configuration settings and verify the server is configured to transfer Samsung SDS EMM logs to another server for storage, analysis, and reporting.

On the MDM console, do the following:
1. Go to Setting >> Server >> Configuration.
2. Click "Audit" at the top of the window and verify audit log server and other information is listed.

If the MDM console is not configured to transfer audit logs to an audit log server, this is a finding.

Note: Samsung SDS EMM logs include logs of MDM events and logs transferred to the Samsung SDS EMM by MDM agents of managed devices.

Vulnerability Number

V-225643

Documentable

False

Rule Version

SSDS-00-000510

Severity Override Guidance

Review the Samsung SDS EMM configuration settings and verify the server is configured to transfer Samsung SDS EMM logs to another server for storage, analysis, and reporting.

On the MDM console, do the following:
1. Go to Setting >> Server >> Configuration.
2. Click "Audit" at the top of the window and verify audit log server and other information is listed.

If the MDM console is not configured to transfer audit logs to an audit log server, this is a finding.

Note: Samsung SDS EMM logs include logs of MDM events and logs transferred to the Samsung SDS EMM by MDM agents of managed devices.

Check Content Reference

M

Target Key

4216

Comments