An error occurred:

Samsung Android OS 9 with Knox 3.x COPE Use Case KPE(Legacy) Deployment STIG

Samsung Android OS 9 with Knox 3.x COPE Use Case KPE(Legacy) Deployment Security Technical Implementation Guide

ID Vuln ID Title Cat Status
KNOX-09-000025 V-217792 The Samsung Android Workspace must be configured to prevent users from adding personal email accounts to the work email app. Cat II
KNOX-09-000045 V-217793 Samsung Android must be configured to enforce the system application disable list. Cat II
KNOX-09-000055 V-217794 Samsung Android Workspace must be configured to enforce the system application disable list. Cat II
KNOX-09-000085 V-217795 Samsung Android Workspace must be configured to enforce an application installation policy by specifying an application whitelist that restricts applications by the following characteristics: list of digital signatures, list of package names. Cat II
KNOX-09-000115 V-217796 The Samsung Android whitelist must be configured to not include applications with the following characteristic: - transmit MD diagnostic data to non-DoD servers. Cat II
KNOX-09-000125 V-217797 The Samsung Android Workspace whitelist must be configured to not include applications with the following characteristics: - back up MD data to non-DoD cloud servers (including user and application access to cloud backup services); - transmit MD diagnostic data to non-DoD servers; - voice assistant application if available when MD is locked; - voice dialing application if available when MD is locked; - allows synchronization of data or applications between devices associated with user; and - allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other MDs or printers. Cat II
KNOX-09-000135 V-217798 Samsung Android must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [DoD-approved commercial app repository, MDM server, mobile application store]: - disallow unknown app installation sources. Cat II
KNOX-09-000175 V-217799 Samsung Android must be configured to enable the Knox audit log. Cat II
KNOX-09-000245 V-217800 Samsung Android must be configured to disable exceptions to the access control policy that prevents [application processes, groups of application processes] from accessing [all, private] data stored by other [application processes, groups of application processes]. Cat II
KNOX-09-000265 V-217801 Samsung Android must be configured to create a Knox Workspace. Cat II
KNOX-09-000305 V-217802 Samsung Android Workspace must be configured to not display the following notifications when the device is locked: - all notifications. Cat II
KNOX-09-000355 V-217803 Samsung Android device users must complete required training. Cat II
KNOX-09-000365 V-217804 Any accessory that provides wired networking capabilities to a Samsung Android device must not be connected to a DoD network (for example: DeX Station [LAN port], USB to Ethernet adapter, etc.). Cat II
KNOX-09-000375 V-217805 Samsung Android must be configured to enforce a minimum password length of six characters. Cat III
KNOX-09-000395 V-217806 Samsung Android must be configured to not allow passwords that include more than two repeating or sequential characters. Cat III

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.