STIGQter STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

The A/B, A/B/C, or A/B/C/D switch used for network switching in IP-based VTC systems implementing a single CODEC that supports conferences on multiple networks with different classification levels must be Common Criteria certified.

DISA Rule

SV-259898r1173869_rule

Vulnerability Number

V-259898

Group Title

SRG-VOIP-000180

Rule Version

SRG-VOIP-000180

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Obtain and install an A/B, A/B/C, or A/B/C/D switch that has obtained Common Criteria certification.

Check Contents

Review the NIAP Product Compliant List (PCL) at https://www.niap-ccevs.org to verify that a certification exists for the A/B, A/B/C, or A/B/C/D switch or review a vendor-provided letter from NIAP or the NIAP test report indicating satisfactory completion of testing and PCL listing.

Validation of certification via the NIAP PCL can be more easily facilitated if the vendor has provided the certification number.

If the product is not on the list or a NIAP letter or test report is not provided, this is a finding.

Vulnerability Number

V-259898

Documentable

False

Rule Version

SRG-VOIP-000180

Severity Override Guidance

Review the NIAP Product Compliant List (PCL) at https://www.niap-ccevs.org to verify that a certification exists for the A/B, A/B/C, or A/B/C/D switch or review a vendor-provided letter from NIAP or the NIAP test report indicating satisfactory completion of testing and PCL listing.

Validation of certification via the NIAP PCL can be more easily facilitated if the vendor has provided the certification number.

If the product is not on the list or a NIAP letter or test report is not provided, this is a finding.

Check Content Reference

M

Target Key

5585