STIGQter: STIG Summary: Google Android 14 MDFPP 3.3 BYOAD Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Oct 2025:

Google Android 14 must prohibit DOD VPN profiles in the Personal Profile.

DISA Rule

SV-260082r1120908_rule

Vulnerability Number

V-260082

Group Title

PP-MDF-331090

Rule Version

GOOG-14-701100

Severity

CAT II

CCI(s)

• CCI-000366 - Implement the security configuration settings.
• CCI-000370 - Manage configuration settings for organization-defined system components using organization-defined automated mechanisms.

Weight

10

Fix Recommendation

Do not configure DOD VPN profiles in the Personal Profile. If there is a DOD VPN profile configured in the Personal Profile, remove it.

Check Contents

Review the list of VPN profiles in the Personal Profile and determine if any VPN profiles are listed. If so, verify the VPN profiles are not configured with a DOD network VPN profile.

If any VPN profiles are installed in the Personal Profile and they have a DOD network VPN profile configured, this is a finding.
Note: This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

Vulnerability Number

V-260082

Documentable

False

Rule Version

GOOG-14-701100

Severity Override Guidance

Review the list of VPN profiles in the Personal Profile and determine if any VPN profiles are listed. If so, verify the VPN profiles are not configured with a DOD network VPN profile.

If any VPN profiles are installed in the Personal Profile and they have a DOD network VPN profile configured, this is a finding.
Note: This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

Check Content Reference

M

Target Key

5589