Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-17685 | RTS-VTC 1250.00 | SV-18859r1_rule | DCBP-1 ECSC-1 | Medium |
Description |
---|
In support of the need for encryption and the need for the VTU user to be aware that in fact his/her conference session is being encrypted, the VTU must display an indicator that encryption is indeed occurring. |
STIG | Date |
---|---|
Video Services Policy STIG | 2020-02-25 |
Check Text ( C-18955r1_chk ) |
---|
[IP][ISDN]; Interview the IAO to validate compliance with the following requirement: Ensure all VTU’s under IAO’s control display a visual indicator that encryption is in fact taking place. Note: During APL testing, this is a finding in the event this requirement is not supported by the CODEC i.e., an on screen visual indicator displaying that encryption is indeed occurring. Note: In the event encryption is provided by external devices (not the CODEC), an external indicator meets this requirement in place of the on-screen indicator. |
Fix Text (F-17582r1_fix) |
---|
[IP][ISDN]; Perform the following tasks: Implement VTU CODECs that provide an on screen indicator that encryption is occurring and active. OR If the encryption is provided by external devices (not the CODEC), implement an external indicator to display encryption status in place of an on-screen indicator provided by the CODEC. |