An error occurred:

BlackBerry Enterprise Server, Part 2

BlackBerry Enterprise Server (version 5.x), Part 2 Security Technical Implementation Guide

ID Vuln ID Title Cat Status
WIR1300-01 V-14022 The BlackBerry wireless email system must be set up with the required system components and software installed on the handheld device. Cat I
WIR1300-02 V-19192 The BES host-based or appliance firewall must be configured as required. Cat I
WIR1305-01 V-7078 The BlackBerry MDS Integration Service must not be installed on a production BES. Cat II
WIR1310-01 V-16341 An Application White List software configuration must be assigned to all BES user accounts. Cat I
WIR1310-02 V-22042 Each Application White List software configuration assigned to each user account must be configured with top-level default “disallow” for all applications. Applications must be specifically allowed at a lower level. Cat I
WIR1310-03 V-19203 An Application Control Policy must be assigned to each application listed in any Application White List software configuration assigned to user accounts on the BES. Note: This check applies to BES 4.1.x only. On BES 5, an application control policy is automatically assigned when an application is selected for a software configuration. Cat II
WIR1310-04 V-19202 Non-core applications used on the BlackBerry must be approved. Cat III
WIR1315-01 V-16343 The BES must be configured to disable the capability of the BES to proxy a user’s authentication to back-office application, web, and content servers. Users must authenticate directly to back-office servers using a USCYBERCOM CTO 07-15Rev1 authorized method. Cat II
WIR1315-02 V-19206 Security controls must be set up on the BES for connections to “back-office” servers. Cat II
WIR1315-03 V-19201 The BES must be configured to accept only trusted connections to back-office enclave application or web push servers. Push servers are set up to push content to BlackBerry users (e.g., Remedy ticket notification system). Cat III
WIR1320-01 V-19215 The BlackBerry Bluetooth Smart Card Reader (SCR) used with site PCs must be compliant with requirements. Cat II
WIR1325-01 V-19224 Required security controls must be used when BlackBerry Wi-Fi is used by the site to connect to a DoD Wi-Fi network. Required security controls are in Table 2, BlackBerry STIG Configuration Tables. Cat III
WIR1330-01 V-11877 The Device Transport Key must be configured on the BES for AES encryption. Cat III
WIR1335-01 V-18394 The BES must be configured to convert HTML and RTF formatted email into text format before sending to a BlackBerry smartphone and prevent the BES from sending email messages with inline images to BlackBerry smartphones. Cat III
WIR1340-01 V-19226 BlackBerry accounts must not be assigned to the default IT policy installed on the BES or any other non-STIG compliant IT policy. Accounts will only be assigned a STIG compliant IT policy. Cat I

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.