| When Voice Video Endpoints do not dynamically assign 802.1Q VLAN tags as data is created and combined, it is possible the VLAN tags will not correctly reflect the data type with which they are associated. VLAN tags are used as security attributes in this context and used as abstractions representing basic properties of an active entity with respect to safeguarding information. These attributes are typically associated with signaling and media streams within the application and are used to enable the implementation of access control and flow control policies, reflect special dissemination, handling or distribution instructions, or support other aspects of the information security policy. Security labels for packets may include traffic flow information (e.g., source, destination, protocol combination); traffic classification based on QoS markings for preferred treatment; and VLAN identification.
When signaling or media streams are created or combined, the security attributes must be dynamically applied to reflect the appropriate sensitivity and characteristics. Assignment to the correct VLAN, application of precedence, and responding to preemption are all ways voice video signaling and media streams must be dynamically controlled. |
