STIGQter STIGQter: STIG Summary: BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 26 Jul 2023:

If the BlackBerry Presence service is installed on the BlackBerry Enterprise Mobility Server (BEMS), it must be configured with the whitelisting control to limit presence subscriptions to only single domain/tenant.

DISA Rule

SV-254731r879887_rule

Vulnerability Number

V-254731

Group Title

SRG-APP-000516-AS-000237

Rule Version

BEMS-03-015000

Severity

CAT III

CCI(s)

Weight

10

Fix Recommendation

Configure Domain Whitelisting for the Presence service.

1. Under the BlackBerry Service Configuration select "Presence".
2. Select "Settings".
3. Confirm "Enable domain whitelisting" has been checked.
4. Click the plus sign and add the domain to whitelist.

Check Contents

This requirement is not applicable if the Presence service is not enabled on BEMS.

Verify that Domain whitelisting has been configured.

1. Under the BlackBerry Service Configuration select "Presence".
2. Select "Settings".
3. Confirm "Enable domain whitelisting" has been checked.

If "Enable domain whitelisting" is not selected, this is a finding.

Vulnerability Number

V-254731

Documentable

False

Rule Version

BEMS-03-015000

Severity Override Guidance

This requirement is not applicable if the Presence service is not enabled on BEMS.

Verify that Domain whitelisting has been configured.

1. Under the BlackBerry Service Configuration select "Presence".
2. Select "Settings".
3. Confirm "Enable domain whitelisting" has been checked.

If "Enable domain whitelisting" is not selected, this is a finding.

Check Content Reference

M

Target Key

5488