UCF STIG Viewer Logo

The Voice Video Session Manager must require Voice Video endpoints to re-register at least every three (3) hours.


Overview

Finding ID Version Rule ID IA Controls Severity
V-206844 SRG-NET-000338-VVSM-00006 SV-206844r508661_rule Medium
Description
Device registration is a solution enabling an organization to manage devices. It is an additional layer of authentication ensuring only specific pre-authorized devices can access the system. Registration is the process of authorizing endpoints to communicate with the session manager. Registration occurs with the SIP server in VoIP systems and with a gatekeeper in H.323 systems. Without enforcing registration, an adversary could impersonate a legitimate device on the Voice Video network.
STIG Date
Voice Video Session Management Security Requirements Guide 2020-09-04

Details

Check Text ( C-7099r364721_chk )
Verify the Voice Video Session Manager requires Voice Video endpoints to re-register at least every three hours.

If the Voice Video Session Manager does not require Voice Video endpoints to re-register or does not enforce re-registration at least every three hours, this is a finding.
Fix Text (F-7099r364722_fix)
Configure the Voice Video Session Manager to re-register Voice Video endpoints at least every three hours.