V-252871

Discussion

Wi-Fi Sharing is an optional configuration of Wi-Fi Tethering/Mobile Hotspot, which allows the device to share its Wi-Fi connection with other wirelessly connected devices instead of its mobile (cellular) connection. Wi-Fi Sharing grants the "other" device access to a corporate Wi-Fi network and may possibly bypass the network access control mechanisms. This risk can be partially mitigated by requiring the use of a preshared key for personal hotspots. SFR ID: FMT_SMF_EXT.1.1 #47

Check Content

Review device configuration settings to confirm Wi-Fi Sharing is disabled. 
 
Mobile Hotspot must be enabled to enable Wi-Fi Sharing. If the Authorizing Official (AO) has not approved Mobile Hotspot, and it has been verified as disabled on the EMM console, no further action is needed. If Mobile Hotspot is being used, use the following procedure to verify Wi-Fi Sharing is disabled: 

On the EMM console:
1. Open "Set user restrictions on parent".
2. Verify that "Disallow config tethering" is toggled to "On".

On the Zebra Android 11 device, do the following: 
1. Open Settings. 
2. Tap "Networks & internet". 
3. Verify that "Hotspots & tethering" is disabled. 
 
If on the Zebra Android 11 device "Wi-Fi sharing" is enabled, this is a finding.