AIOS-15-010200 - Apple iOS/iPadOS 15 must be configured to disable ad hoc wireless client-to-client connection capability.

Information

Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow the exposure of sensitive DoD data and increase the risk of downloading and installing malware on the DoD mobile device.

SFR ID: FMT_SMF_EXT.1.1/WLAN

NOTE: Nessus has not performed this check. Please review the benchmark to ensure target compliance.

Solution

If the AO has not approved the use of AirDrop for unmanaged data transfer, install a configuration profile to disable the AllowAirDrop control in the management tool. This a supervised-only control.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Apple_iOS-iPadOS_15_V1R4_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-40, CAT|II, CCI|CCI-002536, Rule-ID|SV-250946r853257_rule, STIG-ID|AIOS-15-010200, Vuln-ID|V-250946

Plugin: MDM

Control ID: b9f27d25d2dd4235dd7efc6b5b7a1ef974a676c9d3f4e13544034613f5c986a9