Control Strategy DisableMeshRouting

URI: CSG-DisableMeshRouting

Package: LocalDeviceConnectivity

< prev | next >

Description: Bluetooth mesh routing is disabled in device Gateway, preventing it routing between its Bluetooth connections from FromHost to ToHost. This strategy does not represent a contingency plan, but a permanent restriction introduced by design or in accordance with an operational policy or user preference. It also triggers threats representing side effects that would be caused by such a restriction. The default configuration for most Bluetooth enabled hosts is to have mesh routing disabled, but the model must assume it is enabled unless the control is selected, or potential threats may be overlooked.

Blocked Threats (1)

Sg.TA.L1SSg2.8

Mesh routing between FromHost and ToHost via Gateway is enabled: if this route is enabled by mesh routing via non-IP connections, it could be exploited by an attacker.

Triggers Threats (2)

Sg.A.L1SSg2.6.1

Mesh routing between FromHost and ToHost via Gateway is disabled: if this route is disabled by switching off mesh routing via non-IP connections at Gateway, the route will be unavailable to legitimate users.

Sg.DA.L1SSg2AC.1

Mesh routing between FromHost and ToHost not disabled at reenabled at Gateway: if an attacker has admin rights on host Gateway, they can override a policy not to enable mesh routing between paired hosts.