The Samsung Android device must be configured to enforce that Wi-Fi Sharing is disabled.

Wi-Fi Sharing is an optional configuration of Wi-Fi Tethering/Mobile Hotspot, which allows the device to share its Wi-Fi connection with other wirelessly connected devices instead of its mobile (cellular) connection.

Wi-Fi Sharing grants the "other" device access to a corporate Wi-Fi network and may possibly bypass the network access control mechanisms. This risk can be partially mitigated by requiring the use of a preshared key for personal hotspots.

SFR ID: FMT_SMF_EXT.1.1 #47

Verify requirement KNOX-14-110160 ("Disallow config tethering") has been implemented.

If "Disallow config tethering" has not been implemented, this is a finding.

Implement "Disallow config tethering" (refer to requirement KNOX-14-110160).