GOOG-12-009500 - Google Android 12 must be configured to disable ad hoc wireless client-to-client connection capability.

Information

Ad hoc wireless client-to-client connections allow mobile devices to communicate with each other directly, circumventing network security policies and making the traffic invisible. This could allow the exposure of sensitive DoD data and increase the risk of downloading and installing malware of the DoD mobile device.

SFR ID: FMT_SMF_EXT.1.1/WLAN

Solution

Configure the Google Android 12 device to disable ad hoc wireless client-to-client connection capability.

On the MDM console:

COBO:

1. Open 'Settings Management'.
2. Toggle 'Set location' to OFF.

COPE:

1. Open 'User restrictions on parent'.
2. Toggle 'Disallow config location' to ON.
3. Toggle 'Disallow share location' to ON.

Note: Wi-Fi Direct and ad hoc requires Location services to function; therefore, disabling this setting will disable the ad hoc and Wi-Fi Direct feature.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_Google_Android_12_Y24M07_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-40, CAT|II, CCI|CCI-002536, Rule-ID|SV-250438r987886_rule, STIG-ID|GOOG-12-009500, Vuln-ID|V-250438

Plugin: MDM

Control ID: 17e8634a992383ee7e7058b727153ee1826fa6b21c3e61f99ee33b5039dc0dd4