STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

The implementation of an IP-based VTC system that supports conferences on multiple networks with different classification levels must maintain isolation between the networks to which it connects by implementing separation of equipment and cabling between the various networks with differing classification levels in accordance with CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance.

DISA Rule

SV-259901r1173872_rule

Vulnerability Number

V-259901

Group Title

SRG-VOIP-000210

Rule Version

SRG-VOIP-000210

Severity

CAT II

CCI(s)

• CCI-002204 - Defines the security or privacy policy which prohibits the transfer of unsanctioned information between different security domains.
• CCI-000366 - Implement the security configuration settings.

Weight

10

Fix Recommendation

Install cabling and equipment in accordance with the CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance.

Depending on the TEMPEST ZONE, the separation requirements are:
- Minimum equipment separation - 50 cm or 1 m.
- Minimum cable separation - 5 cm or 15 cm.

Check Contents

Review the documentation and based on the TEMPEST ZONE in the CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance, determine if the required separations between RED and BLACK equipment and cables have been met. This includes cable routing inside equipment cabinets. Depending on the TEMPEST ZONE, the separation requirements are:
- Minimum equipment separation - 50 cm or 1 m.
- Minimum cable separation - 5 cm or 15 cm.

If the cables or equipment are closer than the minimum cable and equipment separation distances, this is a finding.

If a CTTA has reviewed the system's installation and provided a favorable report or certification, this is not a finding.

Vulnerability Number

V-259901

Documentable

False

Rule Version

SRG-VOIP-000210

Severity Override Guidance

Review the documentation and based on the TEMPEST ZONE in the CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance, determine if the required separations between RED and BLACK equipment and cables have been met. This includes cable routing inside equipment cabinets. Depending on the TEMPEST ZONE, the separation requirements are:
- Minimum equipment separation - 50 cm or 1 m.
- Minimum cable separation - 5 cm or 15 cm.

If the cables or equipment are closer than the minimum cable and equipment separation distances, this is a finding.

If a CTTA has reviewed the system's installation and provided a favorable report or certification, this is not a finding.

Check Content Reference

M

Target Key

5585