Detections
Analytics
AIOS-16-711300 - Apple iOS/iPadOS 16 must implement the management setting: use SSL for Exchange ActiveSync.
Information
Exchange email messages are a form of data in transit and thus are vulnerable to eavesdropping and man-in-the-middle attacks. Secure Sockets Layer (SSL), also referred to as Transport Layer Security (TLS), provides encryption and authentication services that mitigate the risk of breach.SFR ID: FMT_SMF_EXT.1.1 #47
Solution
Install a configuration profile to use SSL for Exchange ActiveSync.See Also
https://public.cyber.mil/wp-content/uploads/U_Apple_iOS-iPadOS_16_BYOAD_Y25M07_STIG.zip
Item Details
Audit Name: MobileIron - DISA Apple iOS/iPadOS BYOAD 16 v1r2
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-257124r959010_rule, STIG-ID|AIOS-16-711300, Vuln-ID|V-257124
Plugin: MDM
Control ID: 7fafb7ca6906e3f205cbb7123a05c6aed44c3e9ddc6bcc3b8e7f159ab0784880