STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Policy Security Requirements Guide Version: 1 Release: 4 Benchmark Date: 05 Jan 2026:

A MAC Authentication Bypass policy must be implemented for 802.1x unsupported devices that connect to the Enterprise Voice, Video, and Messaging system.

DISA Rule

SV-259939r948786_rule

Vulnerability Number

V-259939

Group Title

SRG-VOIP-000590

Rule Version

SRG-VOIP-000590

Severity

CAT II

CCI(s)

• CCI-001548 - Defines the information flow control policies for controlling the flow of information within the system.

Weight

10

Fix Recommendation

Ensure a policy and procedure is in place and enforced that addresses the operation of MAC Authentication Bypass exceptions to 802.1x requirements.

Check Contents

Verify a policy and procedure is in place and enforced that addresses the operation of MAC Authentication Bypass exceptions to 802.1x requirements.

If a MAC Authentication Bypass policy is not in place and enforced, this is a finding.

Vulnerability Number

V-259939

Documentable

False

Rule Version

SRG-VOIP-000590

Severity Override Guidance

Verify a policy and procedure is in place and enforced that addresses the operation of MAC Authentication Bypass exceptions to 802.1x requirements.

If a MAC Authentication Bypass policy is not in place and enforced, this is a finding.

Check Content Reference

M

Target Key

5585