The Enterprise Voice, Video, and Messaging Session Manager must be configured to offload session (call) records to a central log server.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-260024	SRG-NET-000334-VVSM-00101	SV-260024r949033_rule		High

Description
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. This requirement only applies to components where this is specific to the function of the device (e.g., IDPS sensor logs, firewall logs). This does not apply to audit logs generated on behalf of the device itself (management).

Description

Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited audit storage capacity. This requirement only applies to components where this is specific to the function of the device (e.g., IDPS sensor logs, firewall logs). This does not apply to audit logs generated on behalf of the device itself (management).

STIG	Date
Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide	2024-03-11

Details

Check Text ( C-63755r949031_chk )
Verify the Enterprise Voice, Video, and Messaging Session Manager offloads session records to a central log server. If the Enterprise Voice, Video, and Messaging Session Manager does not offload session records to a central log server, this is a finding.

Fix Text (F-63662r949032_fix)
Configure the Enterprise Voice, Video, and Messaging Session Manager to offload session records to a central log server.