STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

An IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels must be implemented in such a way that configuration information for a network having a higher classification level is not disclosed to a network having a lower classification level.

DISA Rule

SV-259897r1173868_rule

Vulnerability Number

V-259897

Group Title

SRG-VOIP-000170

Rule Version

SRG-VOIP-000170

Severity

CAT II

CCI(s)

• CCI-002204 - Defines the security or privacy policy which prohibits the transfer of unsanctioned information between different security domains.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Do one of the following:

- Architect, implement, and configure the system so the A/B, A/B/C, or A/B/C/D switch connects the CODEC to an unused switch position while it is being reconfigured during transition from one network to another.
- Architect, implement, and configure the system so the CODEC configuration is purged before it is switched to the next network, the CODEC is power cycled for the required time period as the A/B, A/B/C, or A/B/C/D switch connects the CODEC to the next network, and then the CODEC is reconfigured for that network.
- If a manual switching procedure is used, physically disconnect the CODEC from any network while it is reconfigured for the next network.

Check Contents

Review the VTC system architecture documentation and observe system operation while transitioning between networks to verify one of the following:

- The CODEC is switched to a disconnected/unused switch position while it is being purged/reconfigured.
- The CODEC is purged while connected to one network, power cycled as it is switched to the next network, and then reconfigured for that network.

Alternately, if a manual switching procedure is used, verify the CODEC is physically disconnected from any network while being reconfigured.

If none of these procedures is being followed, this is a finding.

Vulnerability Number

V-259897

Documentable

False

Rule Version

SRG-VOIP-000170

Severity Override Guidance

Review the VTC system architecture documentation and observe system operation while transitioning between networks to verify one of the following:

- The CODEC is switched to a disconnected/unused switch position while it is being purged/reconfigured.
- The CODEC is purged while connected to one network, power cycled as it is switched to the next network, and then reconfigured for that network.

Alternately, if a manual switching procedure is used, verify the CODEC is physically disconnected from any network while being reconfigured.

If none of these procedures is being followed, this is a finding.

Check Content Reference

M

Target Key

5585