STIGQter STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

The Session Border Controller (SBC) must be configured to only process signaling packets whose integrity is validated.

DISA Rule

SV-259930r948776_rule

Vulnerability Number

V-259930

Group Title

SRG-VOIP-000500

Rule Version

SRG-VOIP-000500

Severity

CAT II

CCI(s)

Weight

10

Fix Recommendation

Ensure the DISN NIPRNet IPVS SBC is configured to only process signaling packets whose integrity is validated. The current UCR document specifies the hashing algorithm to be used during transmission.

NOTE: The VVoIP system may allow SIP and SRTP traffic encrypted and encapsulated on port 443 from cloud service providers.

Check Contents

Verify the DISN NIPRNet IPVS SBC is configured to only process signaling packets whose integrity is validated. Inspect the configurations of the EBC to determine compliance with the requirement.

If the SBC does not validate the integrity of the received signaling packets, this is a finding.

If the SBC is not configured to drop packets whose integrity is not validated, this is a finding.

NOTE: The VVoIP system may allow SIP and SRTP traffic encrypted and encapsulated on port 443 from cloud service providers.

Vulnerability Number

V-259930

Documentable

False

Rule Version

SRG-VOIP-000500

Severity Override Guidance

Verify the DISN NIPRNet IPVS SBC is configured to only process signaling packets whose integrity is validated. Inspect the configurations of the EBC to determine compliance with the requirement.

If the SBC does not validate the integrity of the received signaling packets, this is a finding.

If the SBC is not configured to drop packets whose integrity is not validated, this is a finding.

NOTE: The VVoIP system may allow SIP and SRTP traffic encrypted and encapsulated on port 443 from cloud service providers.

Check Content Reference

M

Target Key

5585