The Voice Video Session Manager must apply 802.1Q VLAN tags to signaling and media traffic.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-62149	SRG-NET-000520-VVSM-00024	SV-76639r1_rule		Medium

Description
If the network element does not dynamically reconfigure the data security attributes as data is created and combined, there is the possibility that the security attributes will not correctly reflect the data with which they are associated. For the voice video session manager, the use of 802.1q tags on media and signaling, and the use of VLANs provides this layer of security. VLANs facilitate access and traffic control for voice video system components and enhanced QoS. The voice video core equipment must use separate VLANs from other data types to maintain separation.

Description

If the network element does not dynamically reconfigure the data security attributes as data is created and combined, there is the possibility that the security attributes will not correctly reflect the data with which they are associated. For the voice video session manager, the use of 802.1q tags on media and signaling, and the use of VLANs provides this layer of security. VLANs facilitate access and traffic control for voice video system components and enhanced QoS. The voice video core equipment must use separate VLANs from other data types to maintain separation.

STIG	Date
Voice Video Session Management Security Requirements Guide	2016-06-28

Details

Check Text ( C-62953r1_chk )
Verify the Voice Video Session Manager applies 802.1Q VLAN tags to signaling and media traffic. If the Voice Video Session Manager does not apply 802.1Q VLAN tags to signaling and media traffic, this is a finding.

Fix Text (F-68069r1_fix)
Configure the Voice Video Session Manager to apply 802.1Q VLAN tags to signaling and media traffic.