Samsung Android 15 MDFPP 3.3 BYOAD Security Technical Implementation Guide

The Samsung Android 15 MDFPP 3.3 BYOAD Security Technical Implementation Guide (V1 R3) has 29 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

29STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V1 · R3

CurrentPublished Wed Apr 01 2026

Samsung Android 15 must prohibit DOD VPN profiles in the Personal Profile.

Samsung Android 15 MDFPP 3.3 BYOAD Security Technical Implementation Guide

Assessment Title

Rule Text

Samsung Android 15 must prohibit DOD VPN profiles in the Personal Profile.

Description

Discussion Text

If DOD VPN profiles are configured in the Personal Profile, DOD sensitive data would be at risk of compromise and the DOD network could be at risk of being attacked by malware installed on the device.

SFR ID: FMT_SMF.1.1 #3

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-272525

Rule

SV-272525r1120908_rule

Severity

low

Rule Version

KNOX-15-700800

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Review the list of VPN profiles in the Personal Profile and determine if any VPN profiles are listed. If so, verify the VPN profiles are not configured with a DOD network VPN profile.

If any VPN profiles are installed in the Personal Profile and they have a DOD network VPN profile configured, this is a finding.

Note: This setting cannot be managed by the MDM administrator and is a User-Based Enforcement (UBE) requirement.

Implementation Procedure

Fix Text

Do not configure DOD VPN profiles in the Personal Profile.

STIG check 1 of 29 in the Samsung Android 15 MDFPP 3.3 BYOAD STIG checklist

Next · V-272528 →Samsung Android must be configured to enable a screen-lock policy that will lock the display after a period of inactivity - Disable trust agents.