STIGQter: STIG Summary: Jamf Pro v10.x EMM Security Technical Implementation Guide Version: 3 Release: 1 Benchmark Date: 24 Jul 2024:

The Jamf Pro EMM server platform must be protected by a DoD-approved firewall.

DISA Rule

SV-241814r960966_rule

Vulnerability Number

V-241814

Group Title

PP-MDM-431004

Rule Version

JAMF-10-200010

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Install a DoD-approved firewall on the Jamf Pro EMM server.

Check Contents

Review the Jamf Pro EMM server platform configuration to determine whether a DoD-approved firewall is installed or if the platform operating system provides a firewall service that can restrict both inbound and outbound traffic by TCP/UDP port and IP address.

If there is not a host-based firewall present on the Jamf Pro EMM server platform, this is a finding.

Vulnerability Number

V-241814

Documentable

False

Rule Version

JAMF-10-200010

Severity Override Guidance

Review the Jamf Pro EMM server platform configuration to determine whether a DoD-approved firewall is installed or if the platform operating system provides a firewall service that can restrict both inbound and outbound traffic by TCP/UDP port and IP address.

If there is not a host-based firewall present on the Jamf Pro EMM server platform, this is a finding.

Check Content Reference

M

Target Key

5357