STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

An IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing by connecting the CODEC to one network at a time, matching the classification level of the session to the classification level of the network.

DISA Rule

SV-259893r1173864_rule

Vulnerability Number

V-259893

Group Title

SRG-VOIP-000130

Rule Version

SRG-VOIP-000130

Severity

CAT I

CCI(s)

• CCI-002212 - Defines the solutions in approved configurations to be employed to control the flow of organization-defined information across security domains.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Obtain and install an approved A/B, A/B/C, or A/B/C/D switch.

Alternately, manually connect the VTC CODEC to one network at a time through the use of a single patch cord.

Check Contents

Review the VTC system architecture to verify that an approved A/B, A/B/C, or A/B/C/D switch is present and properly cabled.

Alternately, validate that the VTC CODEC is manually connected to one network at a time through the use of a single patch cord.

If neither is in place, this is a finding.

Vulnerability Number

V-259893

Documentable

False

Rule Version

SRG-VOIP-000130

Severity Override Guidance

Review the VTC system architecture to verify that an approved A/B, A/B/C, or A/B/C/D switch is present and properly cabled.

Alternately, validate that the VTC CODEC is manually connected to one network at a time through the use of a single patch cord.

If neither is in place, this is a finding.

Check Content Reference

M

Target Key

5585