AIOS-18-001000 - Apple iOS/iPadOS 18 must allow the administrator (MDM) to perform the following management function: enable/disable VPN protection across the device and [selection: on a per-app basis, on a per-group of applications processes basis] - MDM to perform the following management function: enable/disable VPN protection across the device and [selection: other methods].

CAT|III

CCI|CCI-000068

CCI|CCI-000370

Rule-ID|SV-267937r1031117_rule

STIG-ID|AIOS-18-001000

Vuln-ID|V-267937

AIOS-18-003000 - Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud) - iCloud.

CAT|II

CCI|CCI-001090

Rule-ID|SV-267958r1031138_rule

STIG-ID|AIOS-18-003000

Vuln-ID|V-267958

AIOS-18-003200 - Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud document and data synchronization) - iCloud document and data synchronization.

Rule-ID|SV-267959r1031139_rule

STIG-ID|AIOS-18-003200

Vuln-ID|V-267959

AIOS-18-003300 - Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud Keychain) - iCloud Keychain.

Rule-ID|SV-267960r1031140_rule

STIG-ID|AIOS-18-003300

Vuln-ID|V-267960

AIOS-18-003450 - Apple iOS/iPadOS 18 must not allow backup to remote systems (Cloud Photo Library) - Cloud Photo Library.

Rule-ID|SV-267961r1031141_rule

STIG-ID|AIOS-18-003450

Vuln-ID|V-267961

AIOS-18-003500 - Apple iOS/iPadOS 18 must not allow backup to remote systems (iCloud Photo Sharing, also known as Shared Stream or Shared Photo Stream) - iCloud Photo Sharing, also known as Shared Photo Streams.

Rule-ID|SV-267962r1031142_rule

STIG-ID|AIOS-18-003500

Vuln-ID|V-267962

AIOS-18-003600 - Apple iOS/iPadOS 18 must not allow backup to remote systems (managed applications data stored in iCloud) - managed applications data stored in iCloud.

Rule-ID|SV-267963r1031143_rule

STIG-ID|AIOS-18-003600

Vuln-ID|V-267963

AIOS-18-003700 - Apple iOS/iPadOS 18 must not allow backup to remote systems (enterprise books) - enterprise books.

Rule-ID|SV-267964r1031144_rule

STIG-ID|AIOS-18-003700

Vuln-ID|V-267964

AIOS-18-006500 - Apple iOS/iPadOS 18 must be configured to enforce a minimum password length of six characters.

CCI|CCI-004066

Rule-ID|SV-267987r1031167_rule

STIG-ID|AIOS-18-006500

Vuln-ID|V-267987

AIOS-18-006600 - Apple iOS/iPadOS 18 must be configured to not allow passwords that include more than four repeating or sequential characters.

Rule-ID|SV-267988r1031168_rule

STIG-ID|AIOS-18-006600

Vuln-ID|V-267988

AIOS-18-006800 - Apple iOS/iPadOS 18 must be configured to lock the display after 15 minutes (or less) of inactivity - or less of inactivity.

CCI|CCI-000057

Rule-ID|SV-267990r1031170_rule

STIG-ID|AIOS-18-006800

Vuln-ID|V-267990

AIOS-18-006900 - Apple iOS/iPadOS 18 must be configured to not allow more than 10 consecutive failed authentication attempts.

CCI|CCI-000044

Rule-ID|SV-267991r1031171_rule

STIG-ID|AIOS-18-006900

Vuln-ID|V-267991

AIOS-18-006950 - Apple iOS/iPadOS 18 must be configured to enforce a passcode reuse prohibition of at least two generations.

CAT|I

CCI|CCI-004061

Rule-ID|SV-267992r1031172_rule

STIG-ID|AIOS-18-006950

Vuln-ID|V-267992

AIOS-18-007000 - Apple iOS/iPadOS 18 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DOD-approved commercial app repository, MDM server, mobile application store].

CCI|CCI-000366

Rule-ID|SV-267993r1031173_rule

STIG-ID|AIOS-18-007000

Vuln-ID|V-267993

AIOS-18-007200 - Apple iOS/iPadOS 18 must not include applications with the following characteristics: access to Siri when the device is locked.

CCI|CCI-000803

Rule-ID|SV-267995r1032950_rule

STIG-ID|AIOS-18-007200

Vuln-ID|V-267995

AIOS-18-007400 - The Apple iOS/iPadOS 18 allow list must be configured to not include applications with the following characteristics: - Backs up MD data to non-DOD cloud servers (including user and application access to cloud backup services); - Transmits MD diagnostic data to non-DOD servers; - Allows synchronization of data or applications between devices associated with user; - Allows unencrypted (or encrypted but not FIPS 140-3 validated) data sharing with other MDs or printers; - Backs up its own data to a remote system; and - Uses artificial intelligence (AI), which processes data in the cloud (off device). Exception: Apple Intelligence Private Cloud Compute (PCC) - allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers.

Rule-ID|SV-267997r1042532_rule

STIG-ID|AIOS-18-007400

Vuln-ID|V-267997

AIOS-18-007500 - Apple iOS/iPadOS 18 must be configured to not display notifications when the device is locked.

CCI|CCI-000060

Rule-ID|SV-267998r1031178_rule

STIG-ID|AIOS-18-007500

Vuln-ID|V-267998

AIOS-18-007600 - Apple iOS/iPadOS 18 must not display notifications (calendar information) when the device is locked - calendar information when the device is locked.

Rule-ID|SV-267999r1031179_rule

STIG-ID|AIOS-18-007600

Vuln-ID|V-267999

AIOS-18-008400 - Apple iOS/iPadOS 18 must be configured to display the DOD advisory warning message at startup or each time the user unlocks the device.

CCI|CCI-000048

Rule-ID|SV-268007r1031187_rule

STIG-ID|AIOS-18-008400

Vuln-ID|V-268007

AIOS-18-009200 - Apple iOS/iPadOS 18 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

Rule-ID|SV-268013r1031193_rule

STIG-ID|AIOS-18-009200

Vuln-ID|V-268013

AIOS-18-009700 - Apple iOS/iPadOS 18 must not allow non-DOD applications to access DOD data.

CCI|CCI-002233

CCI|CCI-002530

Rule-ID|SV-268017r1031197_rule

STIG-ID|AIOS-18-009700

Vuln-ID|V-268017

AIOS-18-009800 - Apple iPadOS 18 must be configured to disable multiuser modes.

CCI|CCI-002110

Rule-ID|SV-268018r1031198_rule

STIG-ID|AIOS-18-009800

Vuln-ID|V-268018

AIOS-18-009900 - Apple iOS/iPadOS 18 must be configured to [selection: wipe protected data, wipe sensitive data] upon unenrollment from MDM.

CCI|CCI-001033

Rule-ID|SV-268019r1031199_rule

STIG-ID|AIOS-18-009900

Vuln-ID|V-268019

AIOS-18-010000 - Apple iOS/iPadOS 18 must be configured to [selection: remove Enterprise applications, remove all noncore applications (any nonfactory-installed application)] upon unenrollment from MDM - any nonfactory installed application] upon unenrollment from MDM.

Rule-ID|SV-268020r1031200_rule

STIG-ID|AIOS-18-010000

Vuln-ID|V-268020

AIOS-18-010200 - Apple iOS/iPadOS 18 must be configured to disable ad hoc wireless client-to-client connection capability.

CCI|CCI-002536

Rule-ID|SV-268022r1115587_rule

STIG-ID|AIOS-18-010200

Vuln-ID|V-268022

AIOS-18-010400 - Apple iOS/iPadOS 18 must require a valid password be successfully entered before the mobile device data is unencrypted.

CCI|CCI-001199

Rule-ID|SV-268024r1031204_rule

STIG-ID|AIOS-18-010400

Vuln-ID|V-268024

AIOS-18-010500 - Apple iOS/iPadOS 18 must implement the management setting: limit Ad Tracking.

Rule-ID|SV-268026r1031206_rule

STIG-ID|AIOS-18-010500

Vuln-ID|V-268026

AIOS-18-010600 - Apple iOS/iPadOS 18 must implement the management setting: not allow automatic completion of Safari browser passcodes.

CCI|CCI-000381

Rule-ID|SV-268027r1031207_rule

STIG-ID|AIOS-18-010600

Vuln-ID|V-268027

AIOS-18-010700 - Apple iOS/iPadOS 18 must implement the management setting: encrypt backups/Encrypt local backup.

Rule-ID|SV-268028r1031208_rule

STIG-ID|AIOS-18-010700

Vuln-ID|V-268028

AIOS-18-010800 - Apple iOS/iPadOS 18 must implement the management setting: not allow use of Handoff.

Rule-ID|SV-268029r1031209_rule

STIG-ID|AIOS-18-010800

Vuln-ID|V-268029

AIOS-18-010850 - Apple iOS/iPadOS 18 must implement the management setting: not allow use of iPhone widgets on Mac.

Rule-ID|SV-268030r1031210_rule

STIG-ID|AIOS-18-010850

Vuln-ID|V-268030

AIOS-18-010900 - Apple iOS/iPadOS 18 must implement the management setting: require the user to enter a password when connecting to an AirPlay-enabled device.

CCI|CCI-000067

Rule-ID|SV-268031r1031211_rule

STIG-ID|AIOS-18-010900

Vuln-ID|V-268031

AIOS-18-010950 - Apple iOS/iPadOS 18 must implement the management setting: require passcode for incoming Airplay connection requests.

Rule-ID|SV-268032r1031212_rule

STIG-ID|AIOS-18-010950

Vuln-ID|V-268032

AIOS-18-011000 - Apple iOS/iPadOS 18 must implement the management setting: disable Allow MailDrop.

CCI|CCI-002314

Rule-ID|SV-268033r1031213_rule

STIG-ID|AIOS-18-011000

Vuln-ID|V-268033

AIOS-18-011200 - iPhone and iPad must have the latest available iOS/iPadOS operating system installed.

Rule-ID|SV-268034r1031214_rule

STIG-ID|AIOS-18-011200

Vuln-ID|V-268034

AIOS-18-011300 - Apple iOS/iPadOS 18 must implement the management setting: use SSL for Exchange ActiveSync.

CCI|CCI-000764

Rule-ID|SV-268035r1031215_rule

STIG-ID|AIOS-18-011300

Vuln-ID|V-268035

AIOS-18-011400 - Apple iOS/iPadOS 18 must implement the management setting: not allow messages in an ActiveSync Exchange account to be forwarded or moved to other accounts in the Apple iOS/iPadOS 18 Mail app.

Rule-ID|SV-268036r1031216_rule

STIG-ID|AIOS-18-011400

Vuln-ID|V-268036

AIOS-18-011500 - Apple iOS/iPadOS 18 must implement the management setting: treat AirDrop as an unmanaged destination.

CCI|CCI-002007

Rule-ID|SV-268037r1031217_rule

STIG-ID|AIOS-18-011500

Vuln-ID|V-268037

AIOS-18-011600 - Apple iOS/iPadOS 18 must implement the management setting: not have any Family Members in Family Sharing.

Rule-ID|SV-268038r1031218_rule

STIG-ID|AIOS-18-011600

Vuln-ID|V-268038

AIOS-18-011700 - Apple iOS/iPadOS 18 must implement the management setting: not share location data through iCloud.

Rule-ID|SV-268039r1031219_rule

STIG-ID|AIOS-18-011700

Vuln-ID|V-268039

AIOS-18-011800 - Apple iOS/iPadOS 18 must implement the management setting: force Apple Watch wrist detection.

Rule-ID|SV-268040r1031220_rule

STIG-ID|AIOS-18-011800

Vuln-ID|V-268040

AIOS-18-011900 - Apple iOS/iPadOS 18 users must complete required training.

Rule-ID|SV-268041r1031221_rule

STIG-ID|AIOS-18-011900

Vuln-ID|V-268041

AIOS-18-012000 - A managed photo app must be used to take and store work-related photos.

Rule-ID|SV-268042r1031222_rule

STIG-ID|AIOS-18-012000

Vuln-ID|V-268042

AIOS-18-012200 - Apple iOS/iPadOS 18 must implement the management setting: enable USB Restricted Mode.

Detections

Analytics

AirWatch - DISA Apple iOS/iPadOS 18 v1r4

Warning! Audit Deprecated

Audit Details

Audit Changelog

Revision 1.1

Miscellaneous