The Samsung Android device must be configured to disable all data signaling over [assignment: list of externally accessible hardware ports (for example, USB)].
Severity | Group ID | Group Title | Version | Rule ID | Date | STIG Version |
|---|---|---|---|---|---|---|
| medium | V-269075 | PP-MDF-993300 | KNOX-15-010300 | SV-269075r1036321_rule | 2025-08-22 | 1 |
Description
If a user is able to configure the security setting, the user could inadvertently or maliciously set it to a value that poses unacceptable risk to DOD information systems. An adversary could exploit vulnerabilities created by the weaker configuration to compromise DOD sensitive information.
SFRID: FMT_MOF_EXT.1.2 #24
ℹ️ Check
Review the device configuration to confirm the USB port is disabled except for charging the device.
On the management tool:
Verify "Disallow usb file transfer" is toggled to "OFF".
If on the management tool the USB port is not disabled, this is a finding.
✔️ Fix
Configure the Samsung device to disable the USB port (except for charging the device).
On the management tool:
Toggle "Disallow usb file transfer" to "OFF".