STIGQter: STIG Summary: BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

The BlackBerry Enterprise Mobility Server (BEMS) platform must be protected by a DOD-approved firewall.

DISA Rule

SV-254709r879588_rule

Vulnerability Number

V-254709

Group Title

SRG-APP-000142-AS-000014

Rule Version

BEMS-03-003800

Severity

CAT II

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Install a DOD-approved firewall.

Check Contents

Review the BEMS configuration to determine whether a DOD-approved firewall is installed or if the platform operating system provides a firewall service that can restrict both inbound and outbound traffic by TCP/UDP port and IP address.

If there is not a host-based firewall present on BEMS, this is a finding.

Vulnerability Number

V-254709

Documentable

False

Rule Version

BEMS-03-003800

Severity Override Guidance

Review the BEMS configuration to determine whether a DOD-approved firewall is installed or if the platform operating system provides a firewall service that can restrict both inbound and outbound traffic by TCP/UDP port and IP address.

If there is not a host-based firewall present on BEMS, this is a finding.

Check Content Reference

M

Target Key

5488