LevelBlue Knowledge Base » Knowledgebase » Legacy Products » Endpoint Protection Suite » Mobile Security

Securing an Android device that has been "jailbroken" or "rooted"

Charles Creegan — Tue, 17 Oct 2017 21:03:26 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I correct security on an Android device that has been "jailbroken" or "rooted"?

Background:

Trustwave recommends that mobile devices should not be "jailbroken" or "rooted". When a device is "rooted", all applications have full access to device data and credentials.
On a "rooted" device, a malicious app could steal personal data or use the device camera and microphone to eavesdrop in real time.

Procedure:

The only secure way to repair a "rooted" Android device is to reset the device to factory settings.

Go to Settings > Reset (or Settings > Backup & Reset).
If necessary, enter your PIN, password, or pattern.
Tap Factory data reset and then Reset phone or Reset tablet. If needed, enter your PIN, pattern, or password.
To erase all data from your device's internal storage, tap Erase everything.
When your device has finished erasing, pick the option to restart.

Note:

This action removes all music, video, contacts, photos, and calendar information as well as apps and their data. You may want to back up personal information before taking this action. However, if there is a chance that the device has been hacked or compromised, you should be cautions about restoring data.

Disabling Internet Proxy on Android devices

Charles Creegan — Tue, 17 Oct 2017 21:02:36 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I disable Internet Proxy on Android devices?

Background:

Trustwave recommends that mobile devices should not use a proxy server for WiFi network connections, unless the proxy is required on a trusted organizational network (such as a company or school network).
If Trustwave Mobile Security warns you about proxy settings, but you are connected to a trusted network, check with your IT helpdesk or network administrator to make sure the proxy is required.

Procedure:

You must complete these actions for each WiFi network where Mobile Security warns you about proxy settings.

To disable use of proxy:

Open the Settings app.
Tap Network & Internet and then Wi-Fi.
Touch and hold the Wi-Fi network name.
Tap Modify network.
Next to "Advanced options," tap the Down Arrow.
Under "Proxy," tap the Down arrow.
Tap None.
Tap Save.

Disabling Internet Proxy on iOS Devices

Charles — Tue, 17 Oct 2017 21:02:12 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I disable use of a proxy for WiFi networks on iOS?

Background:

Trustwave recommends that mobile devices should not use a proxy server for WiFi network connections, unless the proxy is required on a trusted organizational network (such as a company or school network).
If Trustwave Mobile Security warns you about proxy settings, but you are connected to a trusted network, check with your IT helpdesk or network administrator to make sure the proxy is required.

Procedure:

You must complete these actions for each WiFi network where Mobile Security warns you about proxy settings.

To disable use of proxy:

On the iPhone or iPad, open Settings > Wi-Fi.
Tap the name of the network that you are connected to.
Scroll to the bottom of the screen to see the section HTTP PROXY.
Tap Off.

Securing an iOS Device that has been "jailbroken" or "rooted"

Charles Creegan — Tue, 17 Oct 2017 20:59:46 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I correct security on an iOS device that has been "jailbroken" or "rooted"?

Background:

Trustwave recommends that mobile devices should not be "jailbroken" or "rooted". When a device is "rooted", all applications have full access to device data and credentials.
On a "rooted" device, a malicious app could steal personal data or use the device camera and microphone to eavesdrop in real time.

Procedure:

The only secure way to repair a "rooted" iOS device is to reset the device to factory settings.

Go to Settings > General > Reset
Tap Erase All Content and Settings
Confirm the reset.

This action removes all music, video, contacts, photos, and calendar information. You may want to back up personal information before taking this action. For more details and help content from Apple, see the Related Links section of this article.

Enabling a Passcode on iOS Devices

Charles Creegan — Tue, 17 Oct 2017 20:57:31 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I enable a Passcode on iOS devices?

Background:

Trustwave recommends that you enable a Passcode (or fingerprint security) on mobile devices. This setting ensures that the device is locked when the screensaver or screen lock is active, and must be unlocked with the passcode or fingerprint.
The passcode is also required to turn on the device or make changes.
The passcode also links to device encryption for further security.
A device without a passcode could be tampered with by anyone, in only a few seconds.

Procedure:

To set up a passcode:

Go to Settings > Touch ID & Passcode (or Settings > Passcode).
Tap Turn Passcode On.
Enter a passcode, and confirm it.

For more details of available options, see the Apple help linked from Related Links below.

Disabling app downloading from other sources on Android devices

Charles Creegan — Mon, 16 Oct 2017 19:29:23 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I disable downloading of apps from "other sources" on Android devices?
How do I disable "sideloading" of apps on Android devices?

Background:

Trustwave recommends that you only download apps from the Google Play Store. Apps available on Google Play are checked for malicious behavior. Apps from other locations are not checked, and they could damage your device or steal data.

Procedure:

To disable downloading from untrusted sources:

Open Settings > Security.
Locate the setting Unknown Sources and turn it off.

For earlier versions of Android:

Open Settings.
Tap Apps & notifications > Advanced > Special app access > Install unknown apps.
Tap the name of the app you want to stop asking you to install unknown apps.
Turn off Allow from this source.

Encrypting data on Android devices

Charles Creegan — Mon, 16 Oct 2017 19:08:28 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I encrypt data on Android devices?

Background:

Encryption ensures that data is secured against any theft of the device. Encryption is tied to passcode or fingerprint security.

Recent Android devices encrypt data by default. To check encryption status:

Go to Settings > Security (or Settings > Security and Location).
Scroll to the section headed Encryption > Encrypt phone.
An encrypted device displays Encrypted.

Procedure:

To encrypt an Android device:

Be aware that this process may take an hour or more.
Back up data - if the process is interrupted, data may be lost.
Plug the device in to charge.

Android 5.0 and 6.0

Go to Settings > Security (or Settings > Security and Location).

Tap Screen Lock.
Tap Pattern, PIN, or Password.
Choose to "further protect this device" by requiring your PIN, pattern, or password when your device starts. The first time that you choose this setting, it will encrypt your device.
- Select Require to start device, and then tap Continue.
- Set a pattern, PIN, or password.
After encryption is completed, you can choose not to require the security when your device starts. However, Trustwave recommends that you keep this extra security.

Android 4.4 and below

Go to Settings > Security (or Settings > Security and Location).
Check that you have set a lock screen pattern, PIN, or password. For details, see article 20930.
Under Encryption, tap Encrypt phone or Encrypt Tablet.
Read the information presented.
Tap Encrypt phone or Encrypt Tablet.
Enter your lock screen PIN, pattern, or password. Tap Continue.
Tap Encrypt phone or Encrypt Tablet again.

Notes:

For further details, see the Related Link below.

Enabling a Passcode and Screen Lock on Android devices

Charles Creegan — Mon, 16 Oct 2017 17:49:48 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I enable a Passcode and Screen Lock on Android devices?

Background:

Trustwave recommends that you enable a Passcode (or fingerprint security) on mobile devices. This settings ensures that the device is locked when the screensaver or screen lock is active, and must be unlocked with the passcode or fingerprint.
A device without a passcode could be tampered with by anyone, in only a few seconds.

Procedure:

To set a passcode:

Go to Settings > Security & Location (or Settings > Security).
Tap Screen Lock.
Choose to use a PIN (numbers only) or password (letters and numbers).
Enter the code you want to use.

Notes:

Depending on the device and version of Android, you can choose other options such as fingerprint sensing and additional security locks. For details, see the Related Link below.

Disabling USB Debugging mode on Android devices

Charles Creegan — Mon, 16 Oct 2017 17:33:34 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I disable USB Debugging mode on Android devices?

Background:

Trustwave recommends that mobile devices should not be set to USB Debugging mode. When a device is in USB Debugging mode, a computer connected to the device can read all data, run commands, and install or remove apps. The security of the device settings and data could be compromised.

Procedure:

To disable USB Debugging mode:

Go to Settings and scroll to the System section (on Android 8 and above, go to Settings > System)
Tap Developer Options.
Tap the button to toggle developer options Off. USB Debugging is included in the Developer Options.

Access to developer options is disabled and not visible on most devices until it is enabled on a different screen. If you do not see Developer Options under System, then developer options are disabled.

Notes:

Trustwave strongly recommends that all Developer Options should be disabled. However, advanced users can control individual settings in Developer Options, including the USB Debugging option. For more details about managing Developer Options, see the Related Link below.

Disabling Developer mode on Android devices

Charles Creegan — Mon, 16 Oct 2017 17:24:57 GMT

This article applies to:

Trustwave Mobile Security
Android devices

Question:

How do I disable Developer mode on Android devices?

Background:

Trustwave recommends that mobile devices should not be set to Developer mode. When a device is in Developer mode, many security controls can be bypassed. The security of the device settings and data could be compromised.

Procedure:

To disable developer options:

Go to Settings and scroll to the System section (on Android 8 and above, go to Settings > System)
Tap Developer Options.
Tap the button to toggle developer options Off.

Access to developer options is disabled and not visible on most devices until it is enabled on a different screen. If you do not see Developer Options under System, then developer options are disabled.

For more details about managing Developer Options, see the Related Link below.

Encrypting data on iOS Devices

Charles Creegan — Sun, 15 Oct 2017 19:43:33 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I encrypt data on iOS devices?

Background:

All iOS devices supported by Mobile Security encrypt data by default. However, to ensure the data is secured against any theft of the device, you must enable passcode or fingerprint security.

Procedure:

To set up a passcode:

Go to Settings > Touch ID & Passcode (or Settings > Passcode).
Tap Turn Passcode On.
Enter a passcode, and confirm it.

At the bottom of the passcode settings page, you will see the text "Data protection is enabled."

You can also set the device to wipe data after the failed attempts to guess the passcode.

For more details of available options, see the Apple help linked from Related Links below.

Disabling USB Debugging mode on iOS devices

Charles Creegan — Sun, 15 Oct 2017 19:23:03 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I disable USB Debugging mode on iOS devices?

Background:

Trustwave recommends that mobile devices should not be set to USB Debugging mode. When a device is in USB Debugging mode, a computer connected to the device can read all data, run commands, and install or remove apps. The security of the device settings and data could be compromised.

Procedure:

The only secure way to disable developer mode on iOS devices is to reset the device to factory settings.

Go to Settings > General > Reset
Tap Erase All Content and Settings
Confirm the reset.

Disabling Developer mode on iOS Devices

Charles Creegan — Sun, 15 Oct 2017 19:16:46 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I disable Developer mode on iOS devices?

Background:

Trustwave recommends that mobile devices should not be set to Developer mode. When a device is in Developer mode, many security controls can be bypassed. The security of the device settings and data could be compromised.

Procedure:

The only secure way to disable developer mode on iOS devices is to reset the device to factory settings.

Go to Settings > General > Reset
Tap Erase All Content and Settings
Confirm the reset.

How does Mobile Security score network reputation?

Charles — Thu, 28 Sep 2017 19:52:47 GMT

This article applies to:

Mobile Security (current versions)
Wifi Protection Reputation score

Question:

How does Mobile Security determine the reputation score for wifi networks?

Information:

The network reputation score is based on reports about the security of the wifi network from mobile endpoints running the app.

When a mobile endpoint connects to a network, the app performs security checks and reports the results to a central system.
The app also asks the central system for past information about the network that it is connected to.
If a network is reported as secure by many devices, it shows a higher score.
If a network has fewer good reports or some bad reports, it shows a lower score.
If a network is currently reported as insecure, it show a low score.

Examples:

A best-practice office network with many connected mobile devices running the app will show an excellent score.
A home network that is used by only one mobile device running the app will show a lower score even if it is secure, because of the low number of reports. However, over time the score will improve.
A public network that does not follow best practices will always show a lower score.

Setting Screen Lock on iOS Devices

Charles — Tue, 01 Aug 2017 15:30:30 GMT

This article applies to:

Trustwave Mobile Security
iOS Devices

Question:

How do I set automatic screen lock on iOS?

Background:

Trustwave recommends that mobile devices have automatic screen lock set so that unauthorized users cannot access an unattended device.

Procedure:

To set automatic screen lock:

On the iPhone or iPad, open Settings > Display and Brightness (before iOS 10, Settings > General).
Scroll to Auto-Lock.
Tap to select a time.

Note:

If Low Power Mode is enabled, Auto-Lock is automatically set to the minimum (30 seconds) and cannot be adusted.