UCF STIG Viewer Logo

The smartphone management server must be configured to control HTML and RTF formatted email.


Overview

Finding ID Version Rule ID IA Controls Severity
V-24977 WIR-WMS-GD-006 SV-30818r1_rule ECWN-1 Low
Description
HTML email and inline images in email can contain malware or links to web sites with malware.
STIG Date
Good Mobility Suite Server (Apple iOS 4) Interim Security Configuration Guide (ISCG) 2011-11-07

Details

Check Text ( C-31238r1_chk )
Detailed Requirements:
- Convert HTML and RTF formatted email into text format before sending to a smartphone.
- Prevent the smartphone management server from sending email messages with inline images to smartphones.

Verify the following Windows registry setting is set on the Good server:
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\GoodLinkServer\parameters\sync]
"htmlEmail"="1"


Mark as a finding if the Windows registry key is not configured as required.
Fix Text (F-27618r1_fix)
Configure the smartphone management server to:
- Convert HTML and RTF formatted email into text format before sending to a smartphone.
- Prevent the smartphone management server from sending email messages with inline images to smartphones.