Detections
Analytics

ZEBR-14-012400 - Zebra Android 14 must allow only the administrator (MDM) to perform the following management function: Disable Phone Hub - MDM to perform the following management function: Disable Phone Hub.

Information

It may be possible to transfer work profile data on a DOD Android device to an unauthorized Chromebook if the user has the same Zebra account set up on the Chromebook and in the work profile on the Android device. This could result in the exposure of sensitive DOD data.

SFR ID: FMT_MOF_EXT.1.2 #47

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

Configure the Zebra Android 14 device to disable the nearby notification streaming policy to disable Phone Hub.

COPE and COBO:

On the EMM console:

1. Open 'Nearby notification streaming policy'.
2. Set 'Nearby notification streaming policy' to 'Disabled'.
3. Open 'Nearby app streaming policy'.
4. Set 'Nearby app streaming policy' to 'Disabled'.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Zebra_Android_14_Y26M05_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-4, CAT|III, CCI|CCI-001090, Rule-ID|SV-283658r1190385_rule, STIG-ID|ZEBR-14-012400, Vuln-ID|V-283658

Plugin: MDM

Control ID: a66cd97df8720267d22c29a18d2e5c0bb08d22e3a5141939d1ab60d64f548e37