CylancePROTECT Mobile must be configured with the following safe browsing controls for BlackBerry Dynamics apps: -Block all unsafe URLs -Select one of the following for "scanning option": "Cloud scanning" or "On device scanning". -Disable "Allow users to override blocked resources and enable access to the requested domain".

An XCCDF Rule

Description

<VulnDiscussion>The required application configurations will ensure that the minimum security baseline of the system is maintained to limit exposure of sensitive data and unauthorized access to the mobile device.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>

ID: SV-257264r918376_rule
Severity: Medium
References: CCI-000366
Updated: 8 months ago

Configure the following safe browsing controls for BlackBerry Dynamics apps:
-Block all unsafe URLs.
-Select one of the following for "scanning option": Cloud scanning, on device scanning.
-Disable "Allow users to override blocked resources and enable access to the requested domain".

1. Log on to the BlackBerry UEM console.2. In the management console on the menu bar, click Policies and profiles >> Protection >> BlackBerry Protect.
3. Open the BlackBerry Protect profile or create a new profile.
4. Select the platform (iOS or Android) to configure safe browsing.
5. Verify that the "Check for unsafe web resources within the BlackBerry Dynamics apps" check box is selected.
6. In the Action for unsafe web resources drop-down list, select "Block".
7. In the Scanning option drop-down list, choose one of the following only (do not choose "No scanning"): "Cloud scanning" or "On device scanning".
8. Do not select the "Allow users to override blocked resources and enable access to the requested domain" check box.
9. Repeat steps 4–8 for the other platform (iOS or Android).
10. Click "Save".
11. Assign the profile to users and groups.

Description

Remediation - Manual Procedure