STIGQter: STIG Summary: Voice/Video over Internet Protocol (VVoIP) STIG Version: 3 Release: 14 Benchmark Date: 26 Apr 2019:

The VVoIP system connects with a DISN IPVS (NPRNET or SIPRNet) but the LSC(s) is not configured to signal with a backup MFSS (or SS) in the event the primary cannot be reached.

DISA Rule

SV-21817r2_rule

Vulnerability Number

V-19676

Group Title

Deficient Imp’n: Backup backbone MFSS or SS

Rule Version

VVoIP 6400

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

In the event the VVoIP system connects to the DISN WAN for VVoIP transport between enclaves AND the system is intended to provide assured service communications to any level of C2 user (Special C2, C2, C2(R)), ensure each enclave containing one or more LSCs is assigned to, associated with, or serviced by two DISN IPVS core backbone systems as follows:
> For DISN NIPRNet IPVS, each enclave will be serviced minimally by one primary and one secondary (backup) MFSS.
> For DISN SIPRNet IPVS, each enclave will be serviced minimally by one primary and one secondary Soft Switch (SS) at the SIPRNET tier 0 routers.

Check Contents

Inspect the configurations of the LSC(s) to determine compliance with the requirement.

This is a finding in the event the LSC(s) are not configured to signal with a backup MGSS(or SS) in the event the primary cannot be reached.

Vulnerability Number

V-19676

Documentable

False

Rule Version

VVoIP 6400

Severity Override Guidance

Inspect the configurations of the LSC(s) to determine compliance with the requirement.

This is a finding in the event the LSC(s) are not configured to signal with a backup MGSS(or SS) in the event the primary cannot be reached.

Check Content Reference

M

Target Key

3407

Comments