2.2.1.9 Ensure 'Allow documents from unmanaged sources in managed destinations' is set to 'Disabled'

Information

This recommendation pertains to Apple's managed application implementation.

The terms 'managed' and 'unmanaged' refer to application classifications made through Managed Open In, a feature introduced in iOS 7. Managed Open In provides for data containerization. Institutionally-provisioned applications are designated as managed. Applications elected by the end user are designated as unmanaged.

Rationale:

Limiting data transfer from the unmanaged user application space to the managed institutional space limits institutional resources from being employed for personal use.

Solution

Open Apple Configurator.

Open the Configuration Profile.

In the left window pane, click on the Restrictions tab.

In the right window pane, under the tab Functionality, uncheck the checkbox for Allow documents from unmanaged sources in managed destinations.

Deploy the Configuration Profile.

See Also

https://workbench.cisecurity.org/benchmarks/15548