STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026: STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:SV-259909r948753_rule
V-259909
SRG-VOIP-000290
SRG-VOIP-000290
CAT II
10
Implement a Call Center or CTI system using soft clients to be segregated into a protected enclave and limit traffic traversing the boundary.
Review the site documentation to confirm a Call Center or CTI system using soft clients must be segregated into a protected enclave and limit traffic traversing the boundary.
When a Call Center/CTI system/application (e.g., call center, helpdesk, operators console, E911 system, etc.) using soft clients are approved for use in the strategic LAN, verify the following:
- The supporting network is configured as a closed enclave or a segregated and access-controlled subenclave having appropriate boundary protection between it and the local general business LAN or external WAN.
- If the CTI application accesses resources outside this enclave and the application could be compromised from external sources, the supporting network is configured to provide separate voice and data zones and maintains separation of voice and data traffic per the VoIP STIG if technically feasible (i.e., such separation does not break the CTI application or there is another compelling reason).
- The supporting network enclave and boundary protection is configured in substantial compliance with the Enclave, Network Infrastructure, and VoIP STIGs.
- The CTI application/enclave (e.g., a call center application) is supported by a dedicated VoIP controller.
If a Call Center or CTI system using soft clients is not segregated into a protected enclave and limits traffic traversing the boundary, this is a finding.
V-259909
False
SRG-VOIP-000290
Review the site documentation to confirm a Call Center or CTI system using soft clients must be segregated into a protected enclave and limit traffic traversing the boundary.
When a Call Center/CTI system/application (e.g., call center, helpdesk, operators console, E911 system, etc.) using soft clients are approved for use in the strategic LAN, verify the following:
- The supporting network is configured as a closed enclave or a segregated and access-controlled subenclave having appropriate boundary protection between it and the local general business LAN or external WAN.
- If the CTI application accesses resources outside this enclave and the application could be compromised from external sources, the supporting network is configured to provide separate voice and data zones and maintains separation of voice and data traffic per the VoIP STIG if technically feasible (i.e., such separation does not break the CTI application or there is another compelling reason).
- The supporting network enclave and boundary protection is configured in substantial compliance with the Enclave, Network Infrastructure, and VoIP STIGs.
- The CTI application/enclave (e.g., a call center application) is supported by a dedicated VoIP controller.
If a Call Center or CTI system using soft clients is not segregated into a protected enclave and limits traffic traversing the boundary, this is a finding.
M
5585