UCF STIG Viewer Logo
Changes are coming to https://stigviewer.com. Take our survey to help us understand your usage and how we can better serve you in the future.
Take Survey

The Enterprise Voice, Video, and Messaging Endpoint must be configured to apply 802.1Q VLAN tags to signaling and media traffic.


Overview

Finding ID Version Rule ID IA Controls Severity
V-259949 SRG-NET-000029-VVEP-00010 SV-259949r948814_rule Medium
Description
When Enterprise Voice, Video, and Messaging Endpoints do not dynamically assign 802.1Q VLAN tags as data is created and combined, it is possible the VLAN tags will not correctly reflect the data type with which they are associated. VLAN tags are used as security attributes. These attributes are typically associated with signaling and media streams within the application and are used to enable the implementation of access control and flow control policies. Security labels for packets may include traffic flow information (e.g., source, destination, protocol combination), traffic classification based on QoS markings for preferred treatment, and VLAN identification. Virtualized networking is used to separate voice video traffic from other types of traffic, such as data, management, and other special types. VLANs provide segmentation at layer 2. Virtual Routing and Forwarding (VRF) provides segmentation at layer 3 and works with Multiprotocol Label Switching (MPLS) for enterprise and WAN environments. When VRF is used without MPLS, it is referred to as VRF lite. For Voice Video systems, subnets, VLANs, and VRFs are used to separate media and signaling streams from all other traffic.
STIG Date
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide 2024-03-06

Details

Check Text ( C-63680r948812_chk )
Verify the Enterprise Voice, Video, and Messaging Endpoint is configured to apply 802.1Q VLAN tags to signaling and media traffic.

If the Enterprise Voice, Video, and Messaging Endpoint does not apply 802.1Q VLAN tags to signaling and media traffic, this is a finding.
Fix Text (F-63587r948813_fix)
Configure the Enterprise Voice, Video, and Messaging Endpoint to apply 802.1Q VLAN tags to signaling and media traffic.