← Back to Samsung Android OS 17 with Knox 3.x COPE Security Technical Implementation Guide

V-286461

CAT II (Medium)

The Samsung Android device must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].

Rule ID

SV-286461r1256403_rule

STIG

Samsung Android OS 17 with Knox 3.x COPE Security Technical Implementation Guide

Version

V1R1

CCIs

CCI-002235

Discussion

If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DoW information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DoW sensitive information. SFR ID: FMT_MOF_EXT.1.2 #24

Check Content

Review the device configuration to confirm the USB port is disabled except for charging the device.

On the management tool:

Verify "Disallow USB file transfer" is toggled to "OFF".

If on the management tool the USB port is not disabled, this is a finding.

Fix Text

Configure the Samsung device to disable the USB port (except for charging the device).

On the management tool:

Toggle "Disallow USB file transfer" to "OFF".