iOS Hardening Configuration Guide - DSD

More documents

Recommendations

Info

Feature Unclassified XX-in-Confidence Restricted/Protected Home Computer backup enforcement MobileMe User ability to install applications EAS EAS Filtering Email secured independently of device passcode MDM Custom APN for 3G data Stated in agency usage policy. Agencies need to assess the risk in their own situation. Agencies need to assess the risk in their own situation. Recommended if Exchange or Lotus is used for agency email. Should be used if mobile device security domain is lower classification than intranet security domain. Use a dedicated third party mail container. Optional depending on role of device/scale of deployment. Stated in agency usage policy. Agencies need to assess the risk in their own situation. Agency approved applications only. Recommend agency iTunes account. Consider MDM enforced Agency Store Apps whitelist. Recommended if Exchange or Lotus is used for agency email. Second factor of authentication using a certificate is preferred. Should be used if mobile device security domain is lower classification than intranet security domain. Use a dedicated third party mail container. Optional depending on role of device/ scale of deployment. Recommended if BYOD model used. Stated in agency usage policy. Generally no, but “Find My iPhone” with free account may be possible. Agency approved applications only. Recommend agency iTunes account. MDM enforced Agency Store Apps whitelist. Possible, with 2 factor authentication. For some agencies a dedicated mail container may be preferable (e.g. Good for Enterprise or Sybase Afaria),or VDI could be used for email access. Should be used if mobile device security domain is lower classification than intranet security domain. Use a dedicated third party mail container. Recommended. Optional. Recommended. Recommended. 23 | D efence Signals Directorate
Feature Unclassified XX-in-Confidence Restricted/Protected Optional depending Recommended. Recommended. VPN-on-Demand on role. SSL Reverse Proxy CA Infrastructure Optional depending on role. Optional depending on role. Optional depending on role of device/ scale of deployment. VPN-On-Demand recommended. Recommended. Required. 24 | D efence Signals Directorate
Page 1 and 2: iOS Hardening Configuration Guide F
Page 3 and 4: Audience This guide is for users an
Page 5 and 6: Using this Guide The following list
Page 7 and 8: Chappter Onne Introoductioon to Mob
Page 9 and 10: The fireewall rules aapplied to th
Page 11 and 12: ensured, due to both ‘Man-in-the-
Page 13 and 14: Question Comments/Selection Does my
Page 15 and 16: Chapter Two Installing iOS 4 This c
Page 17 and 18: Chappter Thhree Secuurity Feeatures
Page 19 and 20: Find My iPhone user interface Gener
Page 21 and 22: Conteent Filterinng Access to intra
Page 23: Chapter Four Suggested Policies Thi
Page 27 and 28: � � � Passcode (can be set vi
Page 29 and 30: VPN � IPSec and SSL are DSD Appro
Page 31 and 32: Chapter Six Mobile Device Managemen
Page 33 and 34: Example of approved or re ecommendd
Page 35 and 36: Task Comments Provide staff with tr
Page 37 and 38: Appendix B Configuration Profiles F
Page 39 and 40: Appendix C Sample Scripts This appe
Page 41 and 42: make new VPN payload with propertie
Page 43 and 44: Appendix E Risk Management Guide Th
Page 45 and 46: Firewall Risk Mitigations Implied P

iOS Hardening Configuration Guide - DSD

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?