Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-25092 | WIR-iOS-005 | SV-31000r1_rule | ECWN-1 | Low |
Description |
---|
The Wi-Fi radio can be used by a hacker to connect to the iOS device without the knowledge of the user. Sensitive DoD data could be exposed and the hacker could use the device to attack the enclave. This setting would allow the device Wi-Fi radio to automatically connect to a Wi-Fi network. |
STIG | Date |
---|---|
Apple iOS 4 (Good Mobility Suite) Interim Security Configuration Guide (ISCG) | 2011-11-07 |
Check Text ( C-31417r1_chk ) |
---|
On a sample of site-managed iOS devices (pick 3-4 random devices), have the user turn on and log into the device. -Go to Settings > Wi-Fi. -Touch Wi-Fi. -Check the setting of "Ask to Join Network". |
Fix Text (F-27875r1_fix) |
---|
The iOS device Wi-Fi setting "Ask to Join Networks" must be set to "On" at all times. |