Detections
Analytics
GOOG-15-013600 - The Google Android device must be configured to disable Wi-Fi Aware for Work Profile apps.
Warning! Audit Deprecated
This audit has been deprecated and will be removed in a future update.
View Next Audit VersionInformation
Wi-Fi Aware allows direct connections between nearby devices for fast data transfer, video streaming, and multiplayer gaming. It allows full peer-to-peer device discovery and communication where two or more devices are publishing and/or subscribing to the same known service name. There is risk that sensitive DOD information could be transferred from a DOD mobile device to a non-DOD device or from Work Profile apps on a DOD device to Personal Profile apps on a non-DOD device.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the Google Android device to disable Wi-Fi Aware for all Work Profile apps.On the EMM console:
For each Work Profile app, configure the NEARBY_WIFI_DEVICE permission to 'deny' to block the use of Wi-Fi Aware if the app supports this feature. If the app does not support Wi-Fi Aware, a NEARBY_WIFI_DEVICE permission may not be available.
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_15_Y26M04_STIG.zip
Item Details
Audit Name: AirWatch - DISA Google Android 15 COPE STIG v1r4
References: CAT|II, CCI|CCI-000366, Rule-ID|SV-278367r1134580_rule, STIG-ID|GOOG-15-013600, Vuln-ID|V-278367
Plugin: MDM
Control ID: bcdef780dc93016ad8badf293d37dfbbf0ece6a395c34ee6c62ca3cd4ed8f37c