An error occurred:

Samsung OS 9 with Knox 3.x COBO Use Case KPE(AE) Deployment STIG

Samsung OS 9 with Knox 3.x COBO Use Case KPE(AE) Deployment Security Technical Implementation Guide

ID Vuln ID Title Cat Status
KNOX-09-000010 V-217660 Samsung Android must be configured to prevent users from adding personal email accounts to the work email app. Cat II
KNOX-09-000040 V-217661 Samsung Android must be configured to enforce the system application disable list. Cat II
KNOX-09-000070 V-217662 Samsung Android must be configured to enforce an application installation policy by specifying an application whitelist that restricts applications by the following characteristics: list of digital signatures, list of package names. Cat II
KNOX-09-000100 V-217663 The Samsung Android whitelist must be configured to not include applications with the following characteristics: - back up mobile device data to non-DoD cloud servers (including user and application access to cloud backup services); - transmit mobile device diagnostic data to non-DoD servers; - voice assistant application if available when the mobile device is locked; - voice dialing application if available when the mobile device is locked; - allows synchronization of data or applications between devices associated with the user; and - allows unencrypted (or encrypted but not FIPS 140-2 validated) data sharing with other mobile devices or printers. Cat II
KNOX-09-000130 V-217664 Samsung Android must be configured to enforce an application installation policy by specifying one or more authorized application repositories, including [DoD-approved commercial app repository, MDM server, mobile application store]: - disallow unknown app installation sources. Cat II
KNOX-09-000170 V-217665 Samsung Android must be configured to enable the Knox audit log. Cat II
KNOX-09-000280 V-217666 Samsung Android must be configured to not display the following notifications when the device is locked: all notifications. Cat II
KNOX-09-000350 V-217667 Samsung Android device users must complete required training. Cat II
KNOX-09-000360 V-217668 Any accessory that provides wired networking capabilities to a Samsung Android device must not be connected to a DoD network (for example: DeX Station [LAN port], USB to Ethernet adapter, etc.). Cat II
KNOX-09-000370 V-217669 Samsung Android must be configured to enforce a minimum password length of six characters. Cat III
KNOX-09-000390 V-217670 Samsung Android must be configured to not allow passwords that include more than two repeating or sequential characters. Cat III
KNOX-09-000400 V-217671 Samsung Android must be configured to lock the display after 15 minutes (or less) of inactivity. Cat II
KNOX-09-000430 V-217672 Samsung Android must be configured to not allow more than 10 consecutive failed authentication attempts. Cat III
KNOX-09-000470 V-217673 Samsung Android must be configured to disable trust agents. Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the products Common Criteria evaluation. Cat II
KNOX-09-000500 V-217674 Samsung Android must be configured to disable Face Recognition. Note: This requirement is not applicable (NA) for specific biometric authentication factors included in the products Common Criteria evaluation. Cat II

Print

Display this benchmark in a printer-friendly format for off-line reference. This display does not include any commands.

Version Changes

If there are multiple versions of this benchmark, Xylok can display the differences between any changes in the checks.