Detections
Analytics
GOOG-17-010800 - The Google Android device must be configured to disable Wi-Fi Aware for work profile apps.
Information
Wi-Fi Aware allows direct connections between nearby devices for fast data transfer, video streaming, and multiplayer gaming. It allows full peer-to-peer device discovery and communication where two or more devices are publishing and/or subscribing to the same known service name. There is risk that sensitive DoW information could be transferred from a DoW mobile device to a non-DoW device or from work profile apps on a DoW device to personal profile apps on a non-DoW device.SFR ID: FMT_SMF.1.1 #47
Solution
Configure the Google Android 17 device to disable Wi-Fi Aware for all work profile apps.On the EMM console:
For each work profile app, configure the NEARBY_WIFI_DEVICE permission to 'deny' to block the use of Wi-Fi Aware if the app supports this feature. If the app does not support Wi-Fi Aware, there may not be a NEARBY_WIFI_DEVICE permission available.
API: NEARBY_WIFI_DEVICE
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip
Item Details
Audit Name: AirWatch - DISA Google Android 17 COBO STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-284743r1240616_rule, STIG-ID|GOOG-17-010800, Vuln-ID|V-284743
Plugin: MDM
Control ID: 349ed57affb5020c0f8c28b916c5d1c0ea1470d16ef87d4410e0c76a9e5c5da4