← Back to BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide

V-254716

CAT I (High)

The BlackBerry Enterprise Mobility Server (BEMS) must be configured to use HTTPS.

Rule ID

SV-254716r879887_rule

STIG

BlackBerry Enterprise Mobility Server 3.x Security Technical Implementation Guide

Version

V1R2

CCIs

CCI-000068

Discussion

Preventing the disclosure of transmitted information requires that applications take measures to employ some form of cryptographic mechanism to protect the information during transmission to web applications. This is usually achieved through the use of HTTPS.

Check Content

Verify BEMS has been configured to use HTTPS as follows:

1. In the BEMS Dashboard, under "BEMS System Settings", click "BEMS Configuration".
2. Click "BlackBerry Dynamics".
3. In the Protocol drop-down list, verify "HTTPS" is selected.

If HTTPS is not configured on BEMS, this is a finding.

Fix Text

Configure BEMS to use HTTPS as follows:

1. In the BEMS Dashboard, under "BEMS System Settings", click "BEMS Configuration".
2. Click "BlackBerry Dynamics".
3. In the Protocol drop-down list, select "HTTPS".