ZEBR-10-000100 - Zebra Android 10 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-242506r714363_rule

STIG-ID|ZEBR-10-000100

Vuln-ID|V-242506

ZEBR-10-000200 - Zebra Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Minimum complex characters

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-242507r714366_rule

STIG-ID|ZEBR-10-000200

Vuln-ID|V-242507

ZEBR-10-000200 - Zebra Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Type

ZEBR-10-000300 - Zebra Android 10 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-242508r714369_rule

STIG-ID|ZEBR-10-000300

Vuln-ID|V-242508

ZEBR-10-000400 - Zebra Android 10 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-242509r714372_rule

STIG-ID|ZEBR-10-000400

Vuln-ID|V-242509

ZEBR-10-000500 - Zebra Android 10 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CAT|III

CCI|CCI-000044

Rule-ID|SV-242510r714375_rule

STIG-ID|ZEBR-10-000500

Vuln-ID|V-242510

ZEBR-10-000800 - Zebra Android 10 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

800-53|CM-11b.

CCI|CCI-001806

Rule-ID|SV-242511r852807_rule

STIG-ID|ZEBR-10-000800

Vuln-ID|V-242511

ZEBR-10-001000 - Zebra Android 10 must be configured to enforce an application installation policy by specifying an application whitelist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

Rule-ID|SV-242512r852808_rule

STIG-ID|ZEBR-10-001000

Vuln-ID|V-242512

ZEBR-10-001100 - Zebra Android 10 whitelist must be configured to not include applications with the following characteristics:

Rule-ID|SV-242513r852809_rule

STIG-ID|ZEBR-10-001100

Vuln-ID|V-242513

ZEBR-10-001400 - Zebra Android 10 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP) - Serial Port Profile capable devices.

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-242514r852810_rule

STIG-ID|ZEBR-10-001400

Vuln-ID|V-242514

ZEBR-10-002300 - Zebra Android 10 must be configured to disable trust agents - NA for specific biometric authentication factors included in the products Common Criteria evaluation.

800-53|CM-6(1)

800-53|CM-7a.

CCI|CCI-000370

CCI|CCI-000381

Rule-ID|SV-242515r714390_rule

STIG-ID|ZEBR-10-002300

Vuln-ID|V-242515

ZEBR-10-002800 - Zebra Android 10 must be configured to disable developer modes.

Rule-ID|SV-242516r714393_rule

STIG-ID|ZEBR-10-002800

Vuln-ID|V-242516

ZEBR-10-003400 - Zebra Android 10 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-242517r714396_rule

STIG-ID|ZEBR-10-003400

Vuln-ID|V-242517

ZEBR-10-003500 - Zebra Android 10 must be configured to disable USB mass storage mode.

Rule-ID|SV-242518r714399_rule

STIG-ID|ZEBR-10-003500

Vuln-ID|V-242518

ZEBR-10-003700 - Zebra Android 10 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|AC-20(2)

CCI|CCI-000097

Rule-ID|SV-242519r714402_rule

STIG-ID|ZEBR-10-003700

Vuln-ID|V-242519

ZEBR-10-003900 - Zebra Android 10 must be configured to not allow backup of all applications and configuration data to remote systems.

800-53|AC-20(3)

CCI|CCI-002338

Rule-ID|SV-242520r852811_rule

STIG-ID|ZEBR-10-003900

Vuln-ID|V-242520

ZEBR-10-004700 - Zebra Android 10 must be configured to disable multi-user modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-242521r852812_rule

STIG-ID|ZEBR-10-004700

Vuln-ID|V-242521

ZEBR-10-005505 - Zebra Android 10 must be configured to enable audit logging.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-242522r852813_rule

STIG-ID|ZEBR-10-005505

Vuln-ID|V-242522

ZEBR-10-006100 - Zebra Android 10 must be configured to generate audit records for the following auditable events: detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-242523r714414_rule

STIG-ID|ZEBR-10-006100

Vuln-ID|V-242523

ZEBR-10-008700 - Zebra Android 10 users must complete required training.

Rule-ID|SV-242524r714417_rule

STIG-ID|ZEBR-10-008700

Vuln-ID|V-242524

ZEBR-10-008800 - Zebra Android 10 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-242525r714420_rule

STIG-ID|ZEBR-10-008800

Vuln-ID|V-242525

ZEBR-10-009000 - Zebra Android 10 must have the DoD root and intermediate PKI certificates installed.

Rule-ID|SV-242526r714423_rule

STIG-ID|ZEBR-10-009000

Vuln-ID|V-242526

ZEBR-10-009100 - Zebra Android 10 must allow only the administrator (MDM) to install/remove DoD root and intermediate PKI certificates - MDM to install/remove DoD root and intermediate PKI certificates.

Rule-ID|SV-242527r714426_rule

STIG-ID|ZEBR-10-009100

Vuln-ID|V-242527

ZEBR-10-009800 - Zebra Android 10 Work Profile must be configured to disable automatic completion of work space internet browser text input.

Rule-ID|SV-242528r714429_rule

STIG-ID|ZEBR-10-009800

Vuln-ID|V-242528

ZEBR-10-010000 - Zebra Android 10 Work Profile must be configured to disable the autofill services.

Rule-ID|SV-242529r714432_rule

STIG-ID|ZEBR-10-010000

Vuln-ID|V-242529

ZEBR-10-010200 - Zebra Android 10 must be configured to disallow configuration of date and time.

Rule-ID|SV-242530r714435_rule

STIG-ID|ZEBR-10-010200

Vuln-ID|V-242530

ZEBR-10-010800 - Zebra Android 10 devices must have the latest available Zebra Android 10 operating system installed.

CAT|I

Rule-ID|SV-242531r714438_rule

STIG-ID|ZEBR-10-010800

Vuln-ID|V-242531

ZEBR-10-011000 - Zebra Android 10 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-242532r714441_rule

STIG-ID|ZEBR-10-011000

Vuln-ID|V-242532

ZEBR-10-999999 - All Zebra Android 10 installations must be removed.

Detections

Analytics

MobileIron - DISA Zebra Android 10 COBO v1r2

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous