STIGQter: STIG Summary: Google Android 16 COBO Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 13 May 2026:

Google Android 16 must be configured to disable ad hoc wireless client-to-client connection capability.

DISA Rule

SV-276768r1140096_rule

Vulnerability Number

V-276768

Group Title

PP-MDF-333330

Rule Version

GOOG-16-009500

Severity

CAT II

CCI(s)

• CCI-002536 - Protect organization-defined external and internal wireless links from organization-defined types of signal parameter attacks or references to sources for such attacks.

Weight

10

Fix Recommendation

Configure the Google Android devices to disallow Wi-Fi Direct. On the management tool, do the following:

COBO:

1. Find "User Restrictions" and select "Set User Restrictions".
2. Scroll down to "Disallow Wi-Fi Direct" and toggle that to "ON".

COPE:

1. Find "User Restrictions on Parent" and select "Set User Restrictions".
2. Scroll down to "Disallow Wi-Fi Direct" and toggle that to "ON".

Configuration API: DISALLOW_WIFI_DIRECT

Check Contents

Review the configuration to determine if the Google Android devices are disallowing Wi-Fi Direct.

This validation procedure is performed on both the management tool and the Google Android device.

On the management tool, in the user restrictions, verify that "Wi-Fi Direct" has been set to "Disallow":

COBO:

1. Find "User Restrictions" and select "Set User Restrictions".
2. Scroll down to "Disallow Wi-Fi Direct" and verify that it is set to "ON".

COPE:

1. Find "User Restrictions on Parent" and select "Set User Restrictions".
2. Scroll down to "Disallow Wi-Fi Direct" and verify that it is set to "ON".

On the Google Android device:

1. Open Settings >> Connections >> Wi-Fi.
2. From the hamburger menu, select Wi-Fi Direct.
3. Verify that Wi-Fi Direct cannot be selected.

If on the management tool "Wi-Fi Direct" is not set to "Disallow", or on the Google Android device a Wi-Fi Direct device is listed that can be connected to, this is a finding.

Vulnerability Number

V-276768

Documentable

False

Rule Version

GOOG-16-009500

Severity Override Guidance

Review the configuration to determine if the Google Android devices are disallowing Wi-Fi Direct.

This validation procedure is performed on both the management tool and the Google Android device.

On the management tool, in the user restrictions, verify that "Wi-Fi Direct" has been set to "Disallow":

COBO:

1. Find "User Restrictions" and select "Set User Restrictions".
2. Scroll down to "Disallow Wi-Fi Direct" and verify that it is set to "ON".

COPE:

1. Find "User Restrictions on Parent" and select "Set User Restrictions".
2. Scroll down to "Disallow Wi-Fi Direct" and verify that it is set to "ON".

On the Google Android device:

1. Open Settings >> Connections >> Wi-Fi.
2. From the hamburger menu, select Wi-Fi Direct.
3. Verify that Wi-Fi Direct cannot be selected.

If on the management tool "Wi-Fi Direct" is not set to "Disallow", or on the Google Android device a Wi-Fi Direct device is listed that can be connected to, this is a finding.

Check Content Reference

M

Target Key

5716