← Back to BlackBerry CylancePROTECT Mobile for UEM Security Technical Implementation Guide

V-257273

CAT II (Medium)

CylancePROTECT Mobile must be configured to enable SMS text message scanning (iOS only).

Rule ID

SV-257273r918403_rule

STIG

BlackBerry CylancePROTECT Mobile for UEM Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000366

Discussion

The required application configurations will ensure that the minimum security baseline of the system is maintained to limit exposure of sensitive data and unauthorized access to the mobile device.

Check Content

Verify SMS text message scanning has been configured as required (iOS only):

1. Log on to the BlackBerry UEM console.
2. In the management console on the menu bar, click Policies and profiles >> Protection >> BlackBerry Protect.
3. Open the BlackBerry Protect profile (have the site system administrator identify the profile from the list).
4. Select the iOS platform.
5. Verify that the "Enable message scanning" check box is selected.
6. Verify in the Scanning option drop-down list, one of the following has been selected AND "No scanning" is not selected:
-"Cloud scanning".
-"On device scanning".

If SMS text message scanning for iOS devices is not configured as required, this is a finding.

Fix Text

Configure SMS text message scanning (iOS only).

1. Log on to the BlackBerry UEM console.
2. In the management console on the menu bar, click Policies and profiles >> Protection >> BlackBerry Protect.
3. Open the BlackBerry Protect profile or create a new profile.
4. Select the iOS platform.
5. Verify that the "Enable message scanning" check box is selected.
6. In the Scanning option drop-down list, choose one of the following only (do not choose "No scanning"): "Cloud scanning" or "On device scanning".
7. Click "Save".
8. Assign the profile to users and groups.