Detections
Analytics
AIOS-26-013300 - Apple iOS/iPadOS 26 must disable 'Allow USB drive access in Files app' if the authorizing official (AO) has not approved the use of DOD-approved USB storage drives with iOS/iPadOS devices - Allow USB drive access in Files app if the Authorizing Official (AO) has not approved the use of DoD-approved USB storage drives with iOS/iPadOS
Information
Unauthorized use of USB storage drives could lead to the introduction of malware or unauthorized software into the DOD IT infrastructure and compromise of sensitive DOD information and systems.SFR ID: FMT_SMF.1.1 #47
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
If the AO has not approved the use of USB drives to load files to Apple devices, install a configuration profile to disable 'Allow USB drive access in Files app'.Configuration Profile Key: allowFilesUSBDriveAccess
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_26_V1R2_STIG.zip
Item Details
Audit Name: AirWatch - DISA Apple iOS/iPadOS 26 v1r2
Category: SYSTEM AND COMMUNICATIONS PROTECTION
References: 800-53|SC-4, CAT|II, CCI|CCI-001090, Rule-ID|SV-278815r1151190_rule, STIG-ID|AIOS-26-013300, Vuln-ID|V-278815
Plugin: MDM
Control ID: 29309f9d1973b521b1852cffd0baadeb60562f29c575fe385cd27ceef8ebeb0d