ZEBR-10-000100 - Zebra Android 10 must be configured to enforce a minimum password length of six characters.

800-53|IA-5(1)(a)

CAT|II

CCI|CCI-000205

Rule-ID|SV-242533r714444_rule

STIG-ID|ZEBR-10-000100

Vuln-ID|V-242533

ZEBR-10-000200 - Zebra Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Minimum complex characters

800-53|CM-6b.

CCI|CCI-000366

Rule-ID|SV-242534r714447_rule

STIG-ID|ZEBR-10-000200

Vuln-ID|V-242534

ZEBR-10-000200 - Zebra Android 10 must be configured to not allow passwords that include more than two repeating or sequential characters - Type

ZEBR-10-000300 - Zebra Android 10 must be configured to enable a screen-lock policy that will lock the display after a period of inactivity.

800-53|AC-11a.

CCI|CCI-000057

Rule-ID|SV-242535r714450_rule

STIG-ID|ZEBR-10-000300

Vuln-ID|V-242535

ZEBR-10-000400 - Zebra Android 10 must be configured to lock the display after 15 minutes (or less) of inactivity.

Rule-ID|SV-242536r714453_rule

STIG-ID|ZEBR-10-000400

Vuln-ID|V-242536

ZEBR-10-000500 - Zebra Android 10 must be configured to not allow more than 10 consecutive failed authentication attempts.

800-53|AC-7a.

CAT|III

CCI|CCI-000044

Rule-ID|SV-242537r714456_rule

STIG-ID|ZEBR-10-000500

Vuln-ID|V-242537

ZEBR-10-000800 - Zebra Android 10 must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [selection: DoD-approved commercial app repository, MDM server, mobile application store].

800-53|CM-11b.

CCI|CCI-001806

Rule-ID|SV-242538r852814_rule

STIG-ID|ZEBR-10-000800

Vuln-ID|V-242538

ZEBR-10-001000 - Zebra Android 10 must be configured to enforce an application installation policy by specifying an application whitelist that restricts applications by the following characteristics: [selection: list of digital signatures, cryptographic hash values, names, application version].

Rule-ID|SV-242539r852815_rule

STIG-ID|ZEBR-10-001000

Vuln-ID|V-242539

ZEBR-10-001100 - Zebra Android 10 whitelist must be configured to not include applications with the following characteristics:

Rule-ID|SV-242540r852816_rule

STIG-ID|ZEBR-10-001100

Vuln-ID|V-242540

ZEBR-10-001400 - Zebra Android 10 must be configured to disable Bluetooth or configured via User Based Enforcement (UBE) to allow Bluetooth for only Headset Profile (HSP), HandsFree Profile (HFP), and Serial Port Profile (SPP) - Serial Port Profile capable devices.

800-53|CM-7(1)(b)

CCI|CCI-001761

Rule-ID|SV-242541r852817_rule

STIG-ID|ZEBR-10-001400

Vuln-ID|V-242541

ZEBR-10-001600 - Zebra Android 10 must be configured to not display the following (work profile) notifications when the device is locked:

Rule-ID|SV-242542r714471_rule

STIG-ID|ZEBR-10-001600

Vuln-ID|V-242542

ZEBR-10-002300 - Zebra Android 10 must be configured to disable trust agents - NA for specific biometric authentication factors included in the products Common Criteria evaluation.

800-53|CM-6(1)

800-53|CM-7a.

CCI|CCI-000370

CCI|CCI-000381

Rule-ID|SV-242543r714474_rule

STIG-ID|ZEBR-10-002300

Vuln-ID|V-242543

ZEBR-10-002800 - Zebra Android 10 must be configured to disable developer modes.

Rule-ID|SV-242544r714477_rule

STIG-ID|ZEBR-10-002800

Vuln-ID|V-242544

ZEBR-10-003400 - Zebra Android 10 must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.

800-53|AC-8a.

CCI|CCI-000048

Rule-ID|SV-242545r714480_rule

STIG-ID|ZEBR-10-003400

Vuln-ID|V-242545

ZEBR-10-003500 - Zebra Android 10 must be configured to disable USB mass storage mode.

Rule-ID|SV-242546r714483_rule

STIG-ID|ZEBR-10-003500

Vuln-ID|V-242546

ZEBR-10-003700 - Zebra Android 10 must be configured to not allow backup of [all applications, configuration data] to locally connected systems.

800-53|AC-20(2)

CCI|CCI-000097

Rule-ID|SV-242547r714486_rule

STIG-ID|ZEBR-10-003700

Vuln-ID|V-242547

ZEBR-10-003900 - Zebra Android 10 must be configured to not allow backup of all applications and configuration data to remote systems.

800-53|AC-20(3)

CCI|CCI-002338

Rule-ID|SV-242548r852818_rule

STIG-ID|ZEBR-10-003900

Vuln-ID|V-242548

ZEBR-10-004500 - Zebra Android 10 must be configured to disable exceptions to the access control policy that prevents application processes from accessing all data stored by other application processes - Copy/Paste

800-53|AC-4(2)

CCI|CCI-002191

Rule-ID|SV-242549r852819_rule

STIG-ID|ZEBR-10-004500

Vuln-ID|V-242549

ZEBR-10-004500 - Zebra Android 10 must be configured to disable exceptions to the access control policy that prevents application processes from accessing all data stored by other application processes - Sharing data into the profile

ZEBR-10-004700 - Zebra Android 10 must be configured to disable multi-user modes.

800-53|AC-2a.

CCI|CCI-002110

Rule-ID|SV-242550r852820_rule

STIG-ID|ZEBR-10-004700

Vuln-ID|V-242550

ZEBR-10-005505 - Zebra Android 10 must be configured to enable audit logging.

800-53|AU-4(1)

CCI|CCI-001851

Rule-ID|SV-242551r852821_rule

STIG-ID|ZEBR-10-005505

Vuln-ID|V-242551

ZEBR-10-006100 - Zebra Android 10 must be configured to generate audit records for the following auditable events: detected integrity violations.

800-53|AU-12a.

CCI|CCI-000169

Rule-ID|SV-242552r714501_rule

STIG-ID|ZEBR-10-006100

Vuln-ID|V-242552

ZEBR-10-008700 - Zebra Android 10 users must complete required training.

Rule-ID|SV-242553r714504_rule

STIG-ID|ZEBR-10-008700

Vuln-ID|V-242553

ZEBR-10-008800 - Zebra Android 10 must be configured to enforce that Wi-Fi Sharing is disabled.

Rule-ID|SV-242554r714507_rule

STIG-ID|ZEBR-10-008800

Vuln-ID|V-242554

ZEBR-10-009000 - Zebra Android 10 must have the DoD root and intermediate PKI certificates installed.

Rule-ID|SV-242555r714510_rule

STIG-ID|ZEBR-10-009000

Vuln-ID|V-242555

ZEBR-10-009100 - Zebra Android 10 must allow only the administrator (MDM) to install/remove DoD root and intermediate PKI certificates - MDM to install/remove DoD root and intermediate PKI certificates.

Rule-ID|SV-242556r714513_rule

STIG-ID|ZEBR-10-009100

Vuln-ID|V-242556

ZEBR-10-009200 - The Zebra Android 10 Work Profile must be configured to prevent users from adding personal email accounts to the work email app.

Rule-ID|SV-242557r714516_rule

STIG-ID|ZEBR-10-009200

Vuln-ID|V-242557

ZEBR-10-009400 - The Zebra Android 10 Work Profile must be configured to enforce the system application disable list.

Rule-ID|SV-242558r714519_rule

STIG-ID|ZEBR-10-009400

Vuln-ID|V-242558

ZEBR-10-009600 - Zebra Android 10 must be provisioned as a fully managed device and configured to create a Work Profile.

Rule-ID|SV-242559r714522_rule

STIG-ID|ZEBR-10-009600

Vuln-ID|V-242559

ZEBR-10-009800 - Zebra Android 10 Work Profile must be configured to disable automatic completion of work space internet browser text input.

Rule-ID|SV-242560r714525_rule

STIG-ID|ZEBR-10-009800

Vuln-ID|V-242560

ZEBR-10-010000 - Zebra Android 10 Work Profile must be configured to disable the autofill services.

Rule-ID|SV-242561r714528_rule

STIG-ID|ZEBR-10-010000

Vuln-ID|V-242561

ZEBR-10-010200 - Zebra Android 10 must be configured to disallow configuration of date and time.

Rule-ID|SV-242562r714531_rule

STIG-ID|ZEBR-10-010200

Vuln-ID|V-242562

ZEBR-10-010800 - Zebra Android 10 devices must have the latest available Zebra Android 10 operating system installed.

CAT|I

Rule-ID|SV-242563r714534_rule

STIG-ID|ZEBR-10-010800

Vuln-ID|V-242563

ZEBR-10-011000 - Zebra Android 10 devices must be configured to disable the use of third-party keyboards.

Rule-ID|SV-242564r714537_rule

STIG-ID|ZEBR-10-011000

Vuln-ID|V-242564

ZEBR-10-999999 - All Zebra Android 10 installations must be removed.

Detections

Analytics

MobileIron - DISA Zebra Android 10 COPE v1r2

Audit Details

File Details

Audit Changelog

Revision 1.1

Miscellaneous