The Voice Video Session Manager must require Voice Video peers (trunks) to re-register at least every hour.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-71687	SRG-NET-000338-VVSM-00056	SV-86311r1_rule		Medium

Description
Device registration is a solution enabling an organization to manage devices. It is an additional layer of authentication ensuring only specific pre-authorized devices and trunks can access the system. Registration is the process of authorizing endpoints and trunks to communicate with the session manager. Registration occurs with the SIP server in VoIP systems and with a gatekeeper in H.323 systems. Without enforcing registration, an adversary could impersonate a legitimate device or peer on the Voice Video network.

Description

Device registration is a solution enabling an organization to manage devices. It is an additional layer of authentication ensuring only specific pre-authorized devices and trunks can access the system. Registration is the process of authorizing endpoints and trunks to communicate with the session manager. Registration occurs with the SIP server in VoIP systems and with a gatekeeper in H.323 systems. Without enforcing registration, an adversary could impersonate a legitimate device or peer on the Voice Video network.

STIG	Date
Voice Video Session Management Security Requirements Guide	2018-07-10

Details

Check Text ( C-71997r1_chk )
Verify the Voice Video Session Manager requires Voice Video peers (trunks) to re-register at least every hour. If the Voice Video Session Manager does not require Voice Video peers (trunks) to re-register at least every hour, this is a finding.

Fix Text (F-78015r1_fix)
Configure the Voice Video Session Manager to re-register Voice Video peers (trunks) to re-register at least every hour.