Originally Posted by
take99 don't like how they mention Fixmo as an example right in the iOS STIG
Note that the MDM, MAM, MDIS, and MEM servers may be included in one application server
product, installed as separate server products from the same vendor, or installed as separate
server products from multiple vendors. In addition, server agents or clients may be separate
mobile device applications or included in one agent. Selection of one vendor’s server may force
the selection of additional servers from the same vendor. For example, the use of the
commercial vendor product Fixmo device integrity scanning server (Fixmo Sentinel) forces the
use of the Fixmo MDM server (also, Fixmo Sentinel) due to the design of the server. In
addition, the use of one vendor’s server may be preferred due to ease of use, setup, or other
important metrics. As long as a vendor’s server meets all of the requirements in the STIG
benchmark for that server (e.g., MDM Server STIG), it can be used. It is the responsibility of the
DoD Command or site to demonstrate that a specific product meets the STIG requirements to
their DAA and document-required configuration settings for that server.
This STIG is vendor independent to the maximum extent possible. The check procedures for
each STIG requirement statement may provide examples of how to verify the requirement has
been met for a specific product for clarity purposes.