If smartphone email auto signatures are used, the signature message must not disclose that the email originated from a smartphone (e.g., “Sent From My Wireless Handheld”).

If smartphone email auto signatures are used, the signature message must not disclose that the email originated from a smartphone (e.g., “Sent From My Wireless Handheld”).

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-24984	WIR-MOS-WP-004	SV-32838r2_rule	ECSC-1	Low

Description
The disclaimer message may give information which may key an attacker in on the device. This is primarily an OPSEC issue. This setting was directed by the CYBERCOM.

STIG	Date
Windows Phone 6.5 (with Good Mobility Suite) Security Technical Implementation Guide	2011-10-04

Details

Check Text ( C-33516r2_chk )
Verify the auto-signature, if used, meets requirements. -Check a random sample of 3-4 devices. -On the handheld, launch the Good client and go to Preferences > Signature. Mark as a finding if the device has been configured with an auto-signature and signature states the email originated from a smartphone.

Fix Text (F-27625r2_fix)
Ensure the smartphone email auto-signature message does not disclose the email originated from a smartphone or a mobile device (e.g., “Sent From My Wireless Handheld”).