STIGQter: STIG Summary: Voice/Video over Internet Protocol (VVoIP) STIG Version: 3 Release: 14 Benchmark Date: 26 Apr 2019:

VVoIP core components must use DHCP static allocation (reservations) or be statically addressed.

DISA Rule

SV-21770r3_rule

Vulnerability Number

V-19629

Group Title

VVoIP 5230

Rule Version

VVoIP 5230

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure all VVoIP core components to use static addressing. The VVoIP core components may be statically addressed by either direct configuration or using DHCP static allocation.

When DHCP static allocation is used, configure the DHCP server supporting VVoIP core components to use a unique DHCP scope separate from other voice, video, data, and management scopes.

Ensure the DHCP server and associated network routing prevents traffic to flow between the VVoIP core component network segment, or VLAN, and any other network segments or VLANs.

Check Contents

Review VVoIP network design to determine how the VVoIP core components IP address is set or configured.

Ensure the VVoIP core components use static addressing.

If all VVoIP core components are not statically addressed, by either direct configuration or using DHCP static allocation, this is a finding.

Vulnerability Number

V-19629

Documentable

False

Rule Version

VVoIP 5230

Severity Override Guidance

Review VVoIP network design to determine how the VVoIP core components IP address is set or configured.

Ensure the VVoIP core components use static addressing.

If all VVoIP core components are not statically addressed, by either direct configuration or using DHCP static allocation, this is a finding.

Check Content Reference

M

Target Key

3407

Comments