Detections
Analytics
GOOG-17-010900 - The Google Android device must be configured to disable Cross-Device Handoff (also called 'Continuity On').
Information
Cross-Device Handoff (also called 'Continuity On') permits a user of an Android phone to transition user activities from one device to another. Handoff passes sufficient information between the devices to describe the activity, but app data synchronization associated with the activity is handled though the cloud, which should be disabled on a compliant Android devices. If a user associates both DoW and personal devices to the same Google account, the user may improperly reveal information about the nature of the user's activities on an unprotected device. Disabling Cross-Device Handoff mitigates this risk.SFR ID: FMT_SMF.1.1 #47
NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Configure the Google Android 17 device to disable Cross-Device Handoff (also called 'Continuity On').On the EMM console:
COBO and COPE:
1. Open User Restrictions.
2. Enable 'TASK_CONTINUITY_HANDOFF_DISABLED'.
API: TASK_CONTINUITY_HANDOFF_DISABLED
See Also
https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_17_Y26M06_STIG.zip
Item Details
Audit Name: AirWatch - DISA Google Android 17 COBO STIG v1r1
Category: CONFIGURATION MANAGEMENT
References: 800-53|CM-6b., CAT|II, CCI|CCI-000366, Rule-ID|SV-284744r1240617_rule, STIG-ID|GOOG-17-010900, Vuln-ID|V-284744
Plugin: MDM
Control ID: 58944689cfa750929acfa2c4982147a27fc7f357973b0021cdabe3d03dc883b3