STIGQter: STIG Summary: Honeywell Android 9.x COBO Security Technical Implementation Guide Version: 1 Release: 1 Benchmark Date: 14 Jan 2021:

The Honeywell Mobility Edge Android Pie device must be configured to enable audit logging.

DISA Rule

SV-235051r626530_rule

Vulnerability Number

V-235051

Group Title

PP-MDF-302370

Rule Version

HONW-09-005505

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.
• CCI-000370 - The organization employs automated mechanisms to centrally manage configuration settings for organization-defined information system components.
• CCI-001851 - The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited.

Weight

10

Fix Recommendation

Configure the Honeywell Android Pie to enable audit logging.

On the MDM console:
1. Open the Restrictions settings.
2. Open User Settings.
3. Select "Enable security logging".
4. Select "Enable network logging".

Check Contents

Review documentation on the Honeywell Android device and inspect the configuration on the Honeywell Android device to enable audit logging.

This validation procedure is performed on only on the MDM Administration console.

On the MDM console:
1. Open the Restrictions settings.
2. Open User Settings.
3. Select "Enable security logging".
4. Select "Enable network logging".

If the MDM console device policy is not set to enable audit logging, this is a finding.

Vulnerability Number

V-235051

Documentable

False

Rule Version

HONW-09-005505

Severity Override Guidance

Review documentation on the Honeywell Android device and inspect the configuration on the Honeywell Android device to enable audit logging.

This validation procedure is performed on only on the MDM Administration console.

On the MDM console:
1. Open the Restrictions settings.
2. Open User Settings.
3. Select "Enable security logging".
4. Select "Enable network logging".

If the MDM console device policy is not set to enable audit logging, this is a finding.

Check Content Reference

M

Target Key

5275

Comments