STIGQter: STIG Summary: Samsung OS 9 with Knox 3.x COBO Use Case KPE(AE) Deployment Security Technical Implementation Guide Version: 1 Release: 3 Benchmark Date: 24 Apr 2020:

Samsung Android must be configured to display the DoD advisory warning message at startup or each time the user unlocks the device.

DISA Rule

SV-103009r1_rule

Vulnerability Number

V-92921

Group Title

PP-MDF-301200

Rule Version

KNOX-09-001160

Severity

CAT III

CCI(s)

• CCI-000048 - The information system displays an organization-defined system use notification message or banner before granting access to the system that provides privacy and security notices consistent with applicable federal laws, Executive Orders, directives, policies, regulations, standards, and guidance.

Weight

10

Fix Recommendation

Configure the DoD warning banner by either of the following methods (required text is found in the Vulnerability Discussion):

- Method #1: Place the DoD warning banner text in the user agreement signed by each Samsung device user.
- Method #2: Configure Samsung Android to display the DoD-mandated warning banner text.

Use either Method #1 (preferred) or Method #2.

****

Method #1: Include the DoD warning banner text in the user agreement that will be signed by each Samsung device user.

****

Method #2: On the MDM console, for the device, in the "Knox banner" group, configure the "banner text" with the DoD-mandated warning banner text.

Note: On some MDM consoles, the Knox banner is automatically enabled while the Samsung Android device is enrolled. In this case, the above guidance is not applicable.

Check Contents

Confirm if Method #1 or Method #2 is used at the Samsung device site and follow the appropriate procedure.

****

Method #1: Review the signed user agreements for several Samsung device users and verify that the agreement includes the required DoD warning banner text.

If the required DoD warning text is not included in all reviewed signed user agreements, this is a finding.

****

Method #2: This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox banner" group, verify that the "banner text" is configured with the required DoD warning banner text

On the Samsung Android device, verify that after a reboot the required DoD warning banner text is displayed.

If on the MDM console the "banner text" is not configured with the required DoD warning banner text, or after a reboot the required DoD warning banner text is not displayed on the Samsung Android device, this is a finding.

Vulnerability Number

V-92921

Documentable

False

Rule Version

KNOX-09-001160

Severity Override Guidance

Confirm if Method #1 or Method #2 is used at the Samsung device site and follow the appropriate procedure.

****

Method #1: Review the signed user agreements for several Samsung device users and verify that the agreement includes the required DoD warning banner text.

If the required DoD warning text is not included in all reviewed signed user agreements, this is a finding.

****

Method #2: This procedure is performed on both the MDM Administration console and the Samsung Android device.

On the MDM console, for the device, in the "Knox banner" group, verify that the "banner text" is configured with the required DoD warning banner text

On the Samsung Android device, verify that after a reboot the required DoD warning banner text is displayed.

If on the MDM console the "banner text" is not configured with the required DoD warning banner text, or after a reboot the required DoD warning banner text is not displayed on the Samsung Android device, this is a finding.

Check Content Reference

M

Target Key

3495

Comments