IBM MaaS360 v2.3.x MDM Security Technical Implementation Guide

The IBM MaaS360 v2.3.x MDM Security Technical Implementation Guide (V1 R2) has 9 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

9STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R2

CurrentPublished Fri Oct 26 2018

Only authorized versions of the IBM MaaS360 server must be used.

IBM MaaS360 v2.3.x MDM Security Technical Implementation Guide

Assessment Title

Rule Text

Only authorized versions of the IBM MaaS360 server must be used.

Description

Discussion Text

The IBM MaaS360 V2 server is no longer supported by IBM and therefore, may contain security vulnerabilities. The IBM MaaS360 V2 server is not authorized within the DoD.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-80971

Rule

SV-95683r1_rule

Severity

high

Rule Version

M360-01-022200

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Interview ISSO and IBM MaaS360 MDM system administrator.

Verify the site is not using the IBM MaaS360 V2 MDM or subscribing to a MaaS360 V2 MDM SaaS.

If the site is using the IBM MaaS360 V2 MDM or subscribing to a MaaS360 V2 MDM SaaS, this is a finding.

Implementation Procedure

Fix Text

Remove all versions of IBM MaaS360 V2 MDM or stop subscribing to a MaaS360 V2 MDM SaaS.

STIG check 9 of 9 in the IBM MaaS360 v2.3.x MDM STIG checklist

← Previous · V-65645The MaaS360 Agent must be configured to alert via the trusted channel to the MaaS360 Server for the following event: change in enrollment status.