STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint not supporting 802.1x must be configured to use MAC Authentication Bypass (MAB) on the access switchport.

DISA Rule

SV-259946r1117236_rule

Vulnerability Number

V-259946

Group Title

SRG-NET-000018

Rule Version

SRG-NET-000018-VVEP-00106

Severity

CAT II

CCI(s)

• CCI-001368 - Enforce approved authorizations for controlling the flow of information within the system based on organization-defined information flow control policies.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint not supporting 802.1x to use MAB on the access switchport.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint not supporting 802.1x is configured to use MAB on the access switchport.

If the Enterprise Voice, Video, and Messaging Endpoint not supporting 802.1x is not configured to use MAB on the access switchport, this is a finding.

Vulnerability Number

V-259946

Documentable

False

Rule Version

SRG-NET-000018-VVEP-00106

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint not supporting 802.1x is configured to use MAB on the access switchport.

If the Enterprise Voice, Video, and Messaging Endpoint not supporting 802.1x is not configured to use MAB on the access switchport, this is a finding.

Check Content Reference

M

Target Key

5586