Detections
Analytics

ZEBR-14-009500 - Zebra Android 14 must be configured to disable ad hoc wireless client-to-client connection capability.

Information

Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow the exposure of sensitive DOD data and increase the risk of downloading and installing malware on the DOD mobile device.

SFR ID: FMT_SMF_EXT.1.1/WLAN

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Zebra Android devices to disallow Wi-Fi Direct.

On the management tool, in the user restrictions, set 'Wi-Fi Direct' to 'Disallow'.

Wi-Fi Direct connections and pairing between devices will become unavailable.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Zebra_Android_14_Y26M05_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-40, CAT|II, CCI|CCI-002536, Rule-ID|SV-283538r1190025_rule, STIG-ID|ZEBR-14-009500, Vuln-ID|V-283538

Plugin: MDM

Control ID: 352413b00bd0f1c1dbd53470b4f599079e7f96f9bb0fb4080c5cdd0aa23e3242