STIGQter: STIG Summary: Omnissa WS1 UEM Agent Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 26 May 2026:

The Omnissa WS1 UEM Agent must be configured to enable the following function: Read audit logs of the managed endpoint device: Android.

DISA Rule

SV-284237r1223978_rule

Vulnerability Number

V-284237

Group Title

SRG-APP-000089-UEM-100012

Rule Version

OMW1-00-100350

Severity

CAT II

CCI(s)

• CCI-000169 - Provide audit record generation capability for the event types the system is capable of auditing as defined in AU-2 a. on organization-defined information system components.
• CCI-001851 - Transfer audit logs per organization-defined frequency to a different system, system component, or media than the system or system component conducting the logging.

Weight

10

Fix Recommendation

Configure the MDM Agent to enable the following function:

Read audit logs of the MD.

On the MDM console, do the following:

1. Authenticate to the Workspace ONE UEM console as the administrator.
2. Navigate to Groups & Settings >> All Settings >> Devices & Users >> General >> Privacy. Enable "Request Device Log" in the privacy settings.
3. Select "Save".

Check Contents

Review the MDM Agent documentation and configuration settings to determine if the following function is enabled:

Read audit logs of the MD.

This validation procedure is performed on the MDM Administration Console.

On the MDM console, do the following:

1. Authenticate to the Workspace ONE UEM console as the administrator.
2. Navigate to Groups & Settings >> All Settings >> Devices & Users >> General >> Privacy. Enable "Request Device Log" in the privacy settings.

If "Request Device Log" is present, then no device log is being requested from the MD, and this is a finding.

Vulnerability Number

V-284237

Documentable

False

Rule Version

OMW1-00-100350

Severity Override Guidance

Review the MDM Agent documentation and configuration settings to determine if the following function is enabled:

Read audit logs of the MD.

This validation procedure is performed on the MDM Administration Console.

On the MDM console, do the following:

1. Authenticate to the Workspace ONE UEM console as the administrator.
2. Navigate to Groups & Settings >> All Settings >> Devices & Users >> General >> Privacy. Enable "Request Device Log" in the privacy settings.

If "Request Device Log" is present, then no device log is being requested from the MD, and this is a finding.

Check Content Reference

M

Target Key

5750