Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-259982 | SRG-NET-000512-VVEP-00103 | SV-259982r956073_rule | Medium |
Description |
---|
An Enterprise Voice, Video, and Messaging Endpoint set to automatically answer a call with audio or video capabilities enabled risks transmitting information not intended for the caller. In the event an Enterprise Voice, Video, and Messaging Endpoint automatically answered a call during a classified meeting or discussion, potentially sensitive or classified information could be transmitted. The auto-answer feature must not be activated by a user unless the feature is required to satisfy mission requirements. |
STIG | Date |
---|---|
Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide | 2024-03-06 |
Check Text ( C-63713r948911_chk ) |
---|
Verify the Enterprise Voice, Video, and Messaging Endpoint is configured to disable any auto answer features. If the Enterprise Voice, Video, and Messaging Endpoint is not configured to disable auto answer features, this is a finding. |
Fix Text (F-63620r948912_fix) |
---|
Configure the Enterprise Voice, Video, and Messaging Endpoint to disable auto answer features. |