Detections
Analytics
AIOS-17-711300 - Apple iOS/iPadOS 17 must implement the management setting: use SSL for Exchange ActiveSync.
Information
Exchange email messages are a form of data in transit and thus are vulnerable to eavesdropping and man-in-the-middle attacks. Secure Sockets Layer (SSL), also referred to as Transport Layer Security (TLS), provides encryption and authentication services that mitigate the risk of breach.SFR ID: FMT_SMF_EXT.1.1 #47
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Install a configuration profile to use SSL for Exchange ActiveSync incoming mail.See Also
https://public.cyber.mil/wp-content/uploads/U_Apple_iOS-iPadOS_17_BYOAD_Y25M07_STIG.zip
Item Details
Audit Name: AirWatch - DISA Apple iOS/iPadOS 17 BYOAD v1r2
Category: IDENTIFICATION AND AUTHENTICATION
References: 800-53|IA-2, CAT|II, CCI|CCI-000764, Rule-ID|SV-259783r959010_rule, STIG-ID|AIOS-17-711300, Vuln-ID|V-259783
Plugin: MDM
Control ID: 59727ec02cbe451da57599676c8b729f6262d384efa7ba248752a53cec1688d1