Skip to content
ATO Pathways
  Log In

II - Mission Support Public

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000119-AS-000079

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must protect log information from unauthorized modification.

    &lt;VulnDiscussion&gt;If log data were to become compromised, then competent forensic analysis and discovery of the true source of potentially mali...
    Rule Medium Severity
    Show

  • SRG-APP-000120-AS-000080

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must protect log information from unauthorized deletion.

    &lt;VulnDiscussion&gt;If log data were to become compromised, then competent forensic analysis and discovery of the true source of potentially mali...
    Rule Medium Severity
    Show

  • SRG-APP-000142-AS-000014

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) platform must be protected by a DoD-approved firewall.

    &lt;VulnDiscussion&gt;Most information systems are capable of providing a wide variety of functions and services. Some of the functions and service...
    Rule Medium Severity
    Show

  • SRG-APP-000142-AS-000014

    <GroupDescription></GroupDescription>
    Group
    Show

  • The firewall protecting the BlackBerry Enterprise Mobility Server (BEMS) must be configured to restrict all network traffic to and from all addresses with the exception of ports, protocols, and IP address ranges required to support BEMS functions.

    &lt;VulnDiscussion&gt;Most information systems are capable of providing a wide variety of functions and services. Some of the functions and service...
    Rule Medium Severity
    Show

  • SRG-APP-000142-AS-000014

    <GroupDescription></GroupDescription>
    Group
    Show

  • The firewall protecting the BlackBerry Enterprise Mobility Server (BEMS) must be configured so that only DoD-approved ports, protocols, and services are enabled. See the DoD Ports, Protocols, Services Management (PPSM) Category Assurance Levels (CAL) list for DoD-approved ports, protocols, and services.

    &lt;VulnDiscussion&gt;All ports, protocols, and services used on DoD networks must be approved and registered via the DoD PPSM process. This is to ...
    Rule Medium Severity
    Show

  • SRG-APP-000439-AS-000155

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must protect the confidentiality and integrity of transmitted information through the use of an approved TLS version.

    &lt;VulnDiscussion&gt;Preventing the disclosure of transmitted information requires that the application server take measures to employ some form o...
    Rule Medium Severity
    Show

  • SRG-APP-000439-AS-000274

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must remove all export ciphers to protect the confidentiality and integrity of transmitted information.

    &lt;VulnDiscussion&gt;During the initial setup of a Transport Layer Security (TLS) connection to the application server, the client sends a list of...
    Rule Medium Severity
    Show

  • SRG-APP-000516-AS-000237

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must be configured to have at least one user in the following Administrator roles: Server primary administrator, auditor.

    &lt;VulnDiscussion&gt;Having several administrative roles for the BEMS supports separation of duties. This allows administrator-level privileges to...
    Rule Medium Severity
    Show

  • SRG-APP-000516-AS-000237

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use Windows Authentication for the database connection.

    &lt;VulnDiscussion&gt;To assure accountability and prevent unauthorized access, organizational users must be identified and authenticated. Organiza...
    Rule Medium Severity
    Show

  • SRG-APP-000516-AS-000237

    <GroupDescription></GroupDescription>
    Group
    Show

  • The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use HTTPS.

    &lt;VulnDiscussion&gt;Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptogr...
    Rule High Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules