V-284829

Discussion

Wi-Fi and Bluetooth hotspot use may increase the risk for exposing sensitive DoW data for some use cases; therefore, it should be disabled unless approved by the AO. When a DoW mobile phone is used as a Wi-Fi or Bluetooth hotspot, a hotspot password must be enabled; otherwise, unauthorized devices could connect to the DoW hotspot, which may increase the risk of exposure of sensitive DoW data and/or a performance degradation of the DoW mobile phone. SFR ID: FMT_SMF_EXT.1.1 / WLAN #3

Check Content

Review device configuration and user training and determine if the AO has approved hotspot use.

If the AO has not approved hotspot use, verify that hotspot use has been disabled:

On the EMM console:

COBO:

1. Open "Set user restrictions".
2. Verify that "Disallow config tethering" is toggled to "ON".

COPE:

1. Open "Set user restrictions on parent".
2. Toggle "Disallow config tethering" to "ON".

On the managed Google Android 17 device:

COBO and COPE:

1. Go to Settings >> Network & Internet.
2. Verify that "Hotspot & tethering" is "Controlled by admin".
3. Verify that tapping "Hotspot & tethering" provides a prompt to the user specifying "Action not allowed".
 
If on the managed Google Android 17 device "Hotspot & tethering" is enabled, this is a finding.

If hotspot use has been approved, verify that the user has been trained to use the default hotspot password. Refer to GOOG-17-009800 for the procedure.

If users are not trained to use the default hotspot password, this is a finding.