Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-259942 | SRG-NET-000015-VVEP-00102 | SV-259942r956070_rule | High |
Description |
---|
For most VoIP systems, registration is the process of centrally recording the user ID, endpoint MAC address, service/policy profile with two-stage authentication prior to authorizing the establishment of the session and user service. The event of successful registration creates the session record immediately. VC systems register using a similar process with a gatekeeper. Without enforcing registration, an adversary could impersonate a legitimate device on the Voice Video network. |
STIG | Date |
---|---|
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide | 2024-03-06 |
Check Text ( C-63673r956068_chk ) |
---|
Verify the Enterprise Voice, Video, and Messaging Endpoint registers with an Enterprise Voice, Video, and Messaging Session Manager. If the Enterprise Voice, Video, and Messaging Endpoint does not register with an Enterprise Voice, Video, and Messaging Session Manager, this is a finding. |
Fix Text (F-63580r956069_fix) |
---|
Configure the Enterprise Voice, Video, and Messaging Endpoint to register with an Enterprise Voice, Video, and Messaging Session Manager. |