UCF STIG Viewer Logo

The Voice Video Endpoint used for videoconferencing must electronically verify the Common Access Card (CAC) or derived credentials.


Overview

Finding ID Version Rule ID IA Controls Severity
V-206773 SRG-NET-000342-VVEP-00031 SV-206773r604140_rule Medium
Description
The use of CAC or derived credentials facilitates standardization and reduces the risk of unauthorized access. DoD has mandated the use of the CAC to support identity management and personal authentication for systems covered under HSPD 12, as well as a primary component of layered protection for national security systems.
STIG Date
Voice Video Endpoint Security Requirements Guide 2020-12-04

Details

Check Text ( C-7029r363842_chk )
If the Voice Video Endpoint is a hardware endpoint, this check procedure is Not Applicable.

Verify the Voice Video Endpoint used for videoconferencing electronically verifies the CAC or derived credentials. For hardware endpoints, the devices must use certificates to register with the session manager or multipoint controller.

If the Voice Video Endpoint used for videoconferencing does not electronically verify the CAC or derived credentials, this is a finding.
Fix Text (F-7029r363843_fix)
Configure the Voice Video Endpoint used for videoconferencing to electronically verify the CAC or derived credentials.