GOOG-09-008800 - Google Android Pie must be configured to enforce that Wi-Fi Sharing is disabled.

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

Wi-Fi Sharing is an optional configuration of Wi-Fi Tethering/Mobile Hotspot, which allows the device to share its Wi-Fi connection with other wirelessly connected devices instead of its mobile (cellular) connection.

Wi-Fi Sharing grants the "other" device access to a corporate Wi-Fi network and may possibly bypass the network access control mechanisms. This risk can be partially mitigated by requiring the use of a preshared key for personal hotspots.

SFR ID: FMT_SMF_EXT.1.1 #47

Solution

Configure Google Android Pie to disable Wi-Fi Sharing.

Mobile Hotspot must be enabled in order to enable Wi-Fi Sharing. If the AO has not approved Mobile Hotspot, and it has been disabled on the MDM console, no further action is needed. If Mobile Hotspot is being used, use the following procedure to disable Wi-Fi Sharing:

On the MDM console:
1. Open the User restrictions setting.
2. Set "Disallow config tethering" to on.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_9-x_V1R1_STIG.zip

Item Details

Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT

References: 800-53|AC-19, 800-53|CM-7, CAT|II, CCI|CCI-000366, CSCv6|9.1, Rule-ID|SV-106451r1_rule, STIG-ID|GOOG-09-008800, Vuln-ID|V-97347

Plugin: MDM

Control ID: 7e8b30041e7c50109e65c35e2b7812890df732cb186af5b76037e45f050f84b5