Apple visionOS 2 must implement the management setting: disable the Bluetooth radio.

Severity	Group ID	Group Title	Version	Rule ID	Date	STIG Version
medium	V-279327	PP-MDF-993300	AVOS-02-019000	SV-279327r1148314_rule	2025-09-30	1

Description
Authorizing Official (AO) approval is required before the Apple device Bluetooth radio can be enabled. All AO approvals should be documented and based on critical mission need. Use of Bluetooth may lead to the exposure of sensitive DOD information in some operational environments.

ℹ️ Check
Determine if the site AO has approved the use of Apple device Bluetooth radios. Look for a document showing AO approval. All AO approvals should be documented and based on critical mission need. If not approved, review configuration settings on the Vision Pro to confirm Bluetooth is disabled. If approved, this requirement is not applicable. If the AO has not approved the use Bluetooth and Bluetooth is not disabled on the Vision Pro device, this is a finding.

ℹ️ Check

Determine if the site AO has approved the use of Apple device Bluetooth radios. Look for a document showing AO approval. All AO approvals should be documented and based on critical mission need. If not approved, review configuration settings on the Vision Pro to confirm Bluetooth is disabled. If approved, this requirement is not applicable. If the AO has not approved the use Bluetooth and Bluetooth is not disabled on the Vision Pro device, this is a finding.

✔️ Fix
If the AO has not approved the use of the Apple device Bluetooth radio, disable Bluetooth use. This requirement is Not Applicable if the AO has approved Bluetooth use. There are two steps to this procedure: 1. MDM sends a device command to site-managed Apple devices to disable Bluetooth during initial setup of device. 2. User is trained to always keep Bluetooth disabled. This requirement is covered in AVOS-02-011900. This is a User-Based Enforcement (UBE) requirement.

✔️ Fix

If the AO has not approved the use of the Apple device Bluetooth radio, disable Bluetooth use. This requirement is Not Applicable if the AO has approved Bluetooth use. There are two steps to this procedure: 1. MDM sends a device command to site-managed Apple devices to disable Bluetooth during initial setup of device. 2. User is trained to always keep Bluetooth disabled. This requirement is covered in AVOS-02-011900. This is a User-Based Enforcement (UBE) requirement.