Skip to content
Log In

BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • SRG-APP-000179-AS-000129

    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) server must be configured to enable FIPS mode.

    Encryption is only as good as the encryption modules utilized. Unapproved cryptographic module algorithms cannot be verified and cannot be relied upon to provide confidentiality or integrity, and D...
    Rule Medium Severity
    Show

  • SRG-APP-000516-AS-000237

    Group
    Show

  • If the BlackBerry Connect service is installed on the BlackBerry Enterprise Mobility Server (BEMS), it must be configured to enable the Web Proxy.

    The web proxy provides a secure gateway for the BlackBerry Connect service so that BEMS can securely connect to the internet.
    Rule Medium Severity
    Show

  • SRG-APP-000516-AS-000237

    Group
    Show

  • SRG-APP-000118-AS-000078

    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must protect log information from any type of unauthorized read access.

    If log data were to become compromised, then competent forensic analysis and discovery of the true source of potentially malicious system activity is difficult, if not impossible, to achieve. In ad...
    Rule Medium Severity
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must protect log information from unauthorized modification.

    If log data were to become compromised, then competent forensic analysis and discovery of the true source of potentially malicious system activity is difficult, if not impossible, to achieve. In ad...
    Rule Medium Severity
    Show

  • The firewall protecting the BlackBerry Enterprise Mobility Server (BEMS) must be configured so that only DOD-approved ports, protocols, and services are enabled.

    All ports, protocols, and services used on DOD networks must be approved and registered via the DOD PPSM process. This is to ensure that a risk assessment has been completed before a new port, prot...
    Rule Medium Severity
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must protect the confidentiality and integrity of transmitted information through the use of an approved TLS version.

    Preventing the disclosure of transmitted information requires that the application server take measures to employ some form of cryptographic mechanism to protect the information during transmission...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules