V-286766

Discussion

The Omnissa CEIP collects and transmits information about the Horizon environment to Omnissa for purposes such as product improvement, feature development, troubleshooting, and usage analysis. Although the information collected is intended to assist the vendor in improving the product, transmission of environment, configuration, operational, or usage data outside of organizational control may introduce unnecessary risk. Information regarding system configurations, software versions, deployment characteristics, usage patterns, and other environmental details may provide insight into the organization's infrastructure and could potentially be aggregated or correlated to reveal information useful to an adversary. Even when data is anonymized or sanitized, organizational policy may prohibit the transmission of system information to external parties unless explicitly authorized. DoW systems must minimize the disclosure of operational and configuration information to external entities and maintain strict control over information leaving the environment. Participation in CEIP is not required for normal Horizon operation and provides no mission-essential functionality. To reduce the risk of unauthorized information disclosure and maintain control over organizational data, the Horizon Connection Server must not be enrolled in the Omnissa CEIP.

Check Content

1. Log in to the Horizon Connection Server Console.

2. From the left pane, navigate to Settings >> Product Licensing and Usage.

3. In the right pane, click the "Customer Experience Program" tab.

4. If "Customer Experience Improvement Program" is set to "Enabled", this is a finding.