Detections
Analytics
AIOS-18-011300 - Apple iOS/iPadOS 18 must implement the management setting: use SSL for Exchange ActiveSync.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Exchange email messages are a form of data in transit and thus are vulnerable to eavesdropping and man-in-the-middle attacks. Secure Sockets Layer (SSL), also referred to as Transport Layer Security (TLS), provides encryption and authentication services that mitigate the risk of breach.SFRID: FMT_SMF.1.1 #47
Solution
Install a configuration profile to use SSL for Exchange ActiveSync incoming mail.See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_18_V2R1_STIG.zip
Item Details
Audit Name: MobileIron - DISA Apple iOS/iPadOS 18 v2r1
References: CAT|II, CCI|CCI-000764, Rule-ID|SV-268035r1031215_rule, STIG-ID|AIOS-18-011300, Vuln-ID|V-268035
Plugin: MDM
Control ID: b1f0a92763fd1d55cb80d7695f9d1ab885c1c9cbb3c9bee02361510cdd23492b