Detections
Analytics
AIOS-02-080104 - Apple iOS must implement the management setting: require password when connecting to AirPlay device for the first time.
Information
When a user is allowed to use AirPlay without a password, there is the potential that it may mistakenly associate the Apple iOS device with an AirPlay-enabled device other than the one intended (i.e., by choosing the wrong one from the AirPlay list displayed). This creates the potential that someone in control of a mistakenly associated device may obtain DoD-sensitive information without authorization. Requiring a password before such an association mitigates this risk. Passwords do not require any administration, nor must they comply with any complexity requirements.NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.
Solution
Install a configuration profile to require the user to enter a password when connecting to an AirPlay-enabled device for the first time.See Also
http://iasecontent.disa.mil/stigs/zip/U_Apple_iOS_10_V1R3_STIG.zip
Item Details
Audit Name: MobileIron - DISA Apple iOS 10 v1r3
Category: ACCESS CONTROL, CONFIGURATION MANAGEMENT
References: 800-53|AC-20(3), 800-53|CM-6b., CAT|III, CCI|CCI-000366, CCI|CCI-002338, Rule-ID|SV-86471r1_rule, STIG-ID|AIOS-02-080104, Vuln-ID|V-71847
Plugin: MDM
Control ID: 177533948230149ddf0a0e2ab634672bd07ffb6c0dd3b12e861169c2032e832f