An error occurred:

Samsung Android OS 6 with KNOX 2-x STIG

Samsung Android OS 6 (with KNOX 2.x) Security Technical Implementation Guide

ID Vuln ID Title Cat Status
KNOX-30-000100 V-69589 All mobile operating system cryptography supporting DoD functionality must be FIPS 140-2 validated. Cat II
KNOX-30-004400 V-69591 The Samsung KNOX for Android platform must protect data at rest on built-in storage media. Cat I
KNOX-30-004410 V-69593 The Samsung KNOX for Android platform must protect data at rest on removable storage media. Cat I
KNOX-30-999999 V-91787 Only authorized versions of the Samsung Android OS must be used. Cat I
KNOX-34-008700 V-69595 The Samsung KNOX for Android platform must enforce a minimum password length of six characters. Cat III
KNOX-34-008900 V-69597 The Samsung KNOX for Android platform must not allow more than 10 consecutive failed authentication attempts. Cat III
KNOX-34-012100 V-69599 The Samsung KNOX for Android platform must lock the display after 15 minutes (or less) of inactivity. Cat II
KNOX-34-012110 V-69601 The Samsung KNOX for Android platform must lock the container after 15 minutes (or less) of inactivity. Cat II
KNOX-35-009000 V-69603 The Samsung KNOX for Android platform must be configured to disable Google Play. Cat II
KNOX-35-009005 V-69749 The Samsung KNOX for Android platform must be configured to enable Google Play Inside KNOX. Cat II
KNOX-35-009010 V-69605 The Samsung KNOX for Android platform must enforce an application installation policy by disabling application installation from unknown sources. Cat II
KNOX-35-009100 V-69607 The Samsung KNOX for Android platform must enforce an application installation policy by specifying an application whitelist. Cat II
KNOX-35-020000 V-69609 The Samsung KNOX for Android platform must not allow use of developer modes. Cat II
KNOX-35-020600 V-69611 The Samsung KNOX for Android platform must have DoD root and intermediate PKI certificates installed on the device. Cat II
KNOX-35-021000 V-69613 The Samsung KNOX for Android platform must be configured to disable Allow New Admin Install. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.