Skip to content

BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The firewall protecting the BlackBerry Enterprise Mobility Server (BEMS) must be configured so that only DOD-approved ports, protocols, and services are enabled.

    <VulnDiscussion>All ports, protocols, and services used on DOD networks must be approved and registered via the DOD PPSM process. This is to ...
    Rule Medium Severity
  • SRG-APP-000439-AS-000155

    <GroupDescription></GroupDescription>
    Group
  • The BlackBerry Enterprise Mobility Server (BEMS) must protect the confidentiality and integrity of transmitted information through the use of an approved TLS version.

    &lt;VulnDiscussion&gt;Preventing the disclosure of transmitted information requires that the application server take measures to employ some form o...
    Rule Medium Severity
  • SRG-APP-000439-AS-000274

    <GroupDescription></GroupDescription>
    Group
  • The BlackBerry Enterprise Mobility Server (BEMS) must remove all export ciphers to protect the confidentiality and integrity of transmitted information.

    &lt;VulnDiscussion&gt;During the initial setup of a Transport Layer Security (TLS) connection to the application server, the client sends a list of...
    Rule Medium Severity
  • SRG-APP-000516-AS-000237

    <GroupDescription></GroupDescription>
    Group
  • The BlackBerry Enterprise Mobility Server (BEMS) must be configured to have at least one user in the following Administrator roles: Server primary administrator, auditor.

    &lt;VulnDiscussion&gt;Having several administrative roles for the BEMS supports separation of duties. This allows administrator-level privileges to...
    Rule Medium Severity
  • SRG-APP-000516-AS-000237

    <GroupDescription></GroupDescription>
    Group
  • SRG-APP-000516-AS-000237

    <GroupDescription></GroupDescription>
    Group
  • If the BlackBerry Docs service is installed on the BlackBerry Enterprise Mobility Server (BEMS), it must be configured to enable the proxy server authentication type (if a proxy is used).

    &lt;VulnDiscussion&gt;The web proxy provides a secure gateway for the BlackBerry Docs service so that BEMS can securely connect to enterprise serve...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules