STIGQter: STIG Summary: BlackBerry CylancePROTECT Mobile for UEM Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 24 Jan 2024:

CylancePROTECT Mobile must be configured to enable SMS text message scanning (iOS only).

DISA Rule

SV-257273r918403_rule

Vulnerability Number

V-257273

Group Title

SRG-APP-000516-AS-000237

Rule Version

BBCP-00-013900

Severity

CAT II

CCI(s)

CCI-000366 - Implement the security configuration settings.

Weight

Fix Recommendation

Configure SMS text message scanning (iOS only).

1. Log on to the BlackBerry UEM console.
2. In the management console on the menu bar, click Policies and profiles >> Protection >> BlackBerry Protect.
3. Open the BlackBerry Protect profile or create a new profile.
4. Select the iOS platform.
5. Verify that the "Enable message scanning" check box is selected.
6. In the Scanning option drop-down list, choose one of the following only (do not choose "No scanning"): "Cloud scanning" or "On device scanning".
7. Click "Save".
8. Assign the profile to users and groups.

Check Contents

Verify SMS text message scanning has been configured as required (iOS only):

1. Log on to the BlackBerry UEM console.
2. In the management console on the menu bar, click Policies and profiles >> Protection >> BlackBerry Protect.
3. Open the BlackBerry Protect profile (have the site system administrator identify the profile from the list).
4. Select the iOS platform.
5. Verify that the "Enable message scanning" check box is selected.
6. Verify in the Scanning option drop-down list, one of the following has been selected AND "No scanning" is not selected:
-"Cloud scanning".
-"On device scanning".

If SMS text message scanning for iOS devices is not configured as required, this is a finding.

Vulnerability Number

V-257273

Documentable

False

Rule Version

BBCP-00-013900

Severity Override Guidance

Check Content Reference

Target Key

5544