STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

The site's enclave boundary protection must route commercial VoIP traffic via a local Media Gateway (MG) connected to a commercial service provider using PRI, CAS, or POTS analog trunks.

DISA Rule

SV-259913r948759_rule

Vulnerability Number

V-259913

Group Title

SRG-VOIP-000330

Rule Version

SRG-VOIP-000330

Severity

CAT II

CCI(s)

• CCI-001606 - Identify potential accessibility problems to outline explicit mitigation actions.

Weight

10

Fix Recommendation

Ensure all VVoIP system access to/from commercial dialup services (voice, video, fax, data) is via a locally implemented MG using a PRI, CAS, or POTS analog trunk to a commercial service provider.

NOTE: Trunks that support SS7 signaling and SS7-based signaling between a DOD network and a non DOD network are prohibited.

Check Contents

If the site is small and has POTS lines terminated on individual phones, a dedicated key system, or a PBX, all of which are separate from the DOD VVoIP system, this is not applicable.

If the site is subtended to an enclave with approved IP voice services providing commercial service, this is not applicable.

Verify all VVoIP system access to/from commercial dialup services (voice, video, fax, data) is via a local MG using a PRI, CAS, or POTS analog trunk to a commercial service provider.

If the site is not connected to the PSTN via a MG located within the local site enclave as described above, this is a finding.

NOTE: Trunks that support SS7 signaling and SS7-based signaling between a DOD network and a non-DOD network are prohibited.

Vulnerability Number

V-259913

Documentable

False

Rule Version

SRG-VOIP-000330

Severity Override Guidance

If the site is small and has POTS lines terminated on individual phones, a dedicated key system, or a PBX, all of which are separate from the DOD VVoIP system, this is not applicable.

If the site is subtended to an enclave with approved IP voice services providing commercial service, this is not applicable.

Verify all VVoIP system access to/from commercial dialup services (voice, video, fax, data) is via a local MG using a PRI, CAS, or POTS analog trunk to a commercial service provider.

If the site is not connected to the PSTN via a MG located within the local site enclave as described above, this is a finding.

NOTE: Trunks that support SS7 signaling and SS7-based signaling between a DOD network and a non-DOD network are prohibited.

Check Content Reference

M

Target Key

5585