id: os_network_known_only
title: Only Allow Known Networks
discussion: |
  The iOS device _MUST_ be configured to only allow known networks in case only trustworthy networks can be used. This can have a limitation on connectivity especially when devices are used in area with low or no network connectivity.
references:
  nist:
    cce:
      ios_27:
        - CCE-XXXXX-X
      ios_26:
        - CCE-95670-6
      ios_18:
        - CCE-94541-0
      ios_17:
        - CCE-93490-1
      visionos_27:
        - CCE-XXXXX-X
  bsi:
    indigo:
      ios_26:
        - ANNEX D (Section 5.7 - Interfaces)
      ios_18:
        - ANNEX D (Section 5.7 - Interfaces)
      ios_17:
        - ANNEX D (Section 5.7 - Interfaces)
platforms:
  iOS:
    '27.0':
      supervised: true
    '26.0':
      supervised: true
      benchmarks:
        - name: indigo_high
    '18.0':
      supervised: true
      benchmarks:
        - name: indigo_high
    '17.0':
      supervised: true
      benchmarks:
        - name: indigo_high
    introduced: '14.5'
  visionOS:
    '27.0':
      supervised: true
    introduced: '2.0'
mobileconfig_info:
  - PayloadType: com.apple.applicationaccess
    PayloadContent:
      - forceWiFiToAllowedNetworksOnly: true
