STIGQter STIGQter: STIG Summary: Voice Video Services Policy Security Technical Implementation Guide Version: 3 Release: 17 Benchmark Date: 25 Oct 2019: The enclave is NOT dual homed to two geographically diverse DISN SDNs and DISN WAN Service (NIPRNet or SIPRNet) Aggregation Routers (AR) or DISN Provider Edge (PE) routers.

DISA Rule

SV-21742r1_rule

Vulnerability Number

V-19601

Group Title

Deficient imp’n: C2 enclave; Dual Homed Circuits

Rule Version

VVoIP 6135 (DISN-IPVS)

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

In the event the VVoIP system connects to the DISN WAN for VVoIP transport between enclaves AND the system is intended to provide assured service communications to any level of C2 user (Special C2, C2, C2(R)), ensure the enclave is dual homed to two geographically diverse DISN SDNs and DISN WAN Service (NIPRNet or SIPRNet) routers.

NOTE: This means there are two DISN (or commercial) access circuits (many circuits will have a commercial component, typically the “last mile”) from the site/enclave to the DISN SDNs.

NOTE: This assumes the site/enclave is NOT collocated with a DISN SDN such that a direct Ethernet or optical connection can be made..

NOTE: If a site is located at a DISN SDN and is able to directly connect to the SDN using Ethernet or optical connections, the site may be able to rely on the dual homing of the SDN into the core. However, the site must still be homed to two geographically diverse ARs. This is dependant upon the size or type of the SDN. A large site directly connected to a smaller SDN will implement an access circuit to a geographically diverse SDN (i.e., another SDN in another location remote from the local SDN. This should not be one of the SDNs that to which the local SDN is homed.

Check Contents

Inspect the documentation showing how the enclave is connected to the DISN to determine compliance with the requirement.

Vulnerability Number

V-19601

Documentable

False

Rule Version

VVoIP 6135 (DISN-IPVS)

Severity Override Guidance

Inspect the documentation showing how the enclave is connected to the DISN to determine compliance with the requirement.

Check Content Reference

M

Potential Impact

Reduced availability and the inability to
complete a C2 call

Responsibility

Information Assurance Officer

Target Key

594

Comments