In addition, there is potential for the user to disable the VPN at any time and some Google traffic is sent prior to the VPN being established. The VPN has not been independently assured to Foundation Grade. The following significant risks have been identified: It is not possible to display security related events such as failed logins Only limited technical controls can be exercised over user access to physical and wireless interfaces on the device.ġ1. Platform integrity and application sandboxingħ. The built-in data encryption has not been independently assured to Foundation Grade.ĥ. The built-in VPN has not been independently assured to Foundation Grade. See How the Platform Can Best Satisfy the Security Recommendations for more details about how each of the security recommendations is met. Rows marked represent a more significant risk. Explanatory text indicates that there is something related to that recommendation that the risk owners should be aware of. This platform has been assessed against each of the twelve security recommendations, and that assessment is shown in the table below.
Users of Chrome OS devices should not use unaccredited enterprise or Internet services to store or process OFFICIAL email, documents or web applications. To support these scenarios, the following architectural choices are recommended:Īll data should be routed over a secure enterprise VPN to ensure the confidentiality and integrity of the traffic, and to benefit from enterprise protective monitoring solutions. This enables a variety of remote working approaches such asĪccessing OFFICIAL email through an enterprise-provided web portal Ĭreating, editing, reviewing and commenting on OFFICIAL documents through an enterprise-provided web portal Īccessing the OFFICIAL intranet resources, the internet and other web-resources. Usage ScenarioĬhrome OS devices will be used remotely over any network bearer, including Ethernet, Wi-Fi and 3G, to connect back to enterprise services over a VPN. This guidance was prepared with the provided versions as of June 2013.
All device management services are provided by Google Infrastructure. This guidance was developed following testing performed on Samsung Chromebooks running Chrome OS version 26.0. This guidance is applicable to devices running Chrome OS 26 and later.
0 kommentar(er)
