V-19191
Required version of the BlackBerry Enterprise Server (BES) must be installed.
Finding ID
WIR1200-02
Rule ID
SV-21030r3_rule
Severity
Cat I
CCE
(None)
Group Title
Required BlackBerry BES version used
CCI
(None)
Target Key
(None)
Documentable
No
Discussion
Earlier versions of the BES have security vulnerabilities. CYBERCOM IAVA directs all DoD installations upgrade to required version due to BlackBerry ending support for version 4.1.6 and 4.1.7 as of 2 July 2011.
Fix Text
The BlackBerry Enterprise Server (BES) version is 5.0.4 or later.
Check Content
Interview ISSO and BlackBerry system administrator. Verify the BES is one of the required/approved versions. Required/approved versions of the BES are: BES 5.0.4 (or later version). From the BlackBerry Manager, select "Help" to view the version number.
Responsibility
System Administrator
IA Controls
ECSC-1