STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing when (date and time) the connection occurred.

DISA Rule

SV-259956r948835_rule

Vulnerability Number

V-259956

Group Title

SRG-NET-000075

Rule Version

SRG-NET-000075-VVEP-00023

Severity

CAT II

CCI(s)

• CCI-000131 - Ensure that audit records containing information that establishes when the event occurred.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint to produce session records containing the date and time when the connection occurred.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint produces session records containing when the connection occurred. The record must include session start/join/leave/stop times.

If the Enterprise Voice, Video, and Messaging Endpoint does not produce session records containing the date and time when the connection occurred, this is a finding.

Vulnerability Number

V-259956

Documentable

False

Rule Version

SRG-NET-000075-VVEP-00023

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint produces session records containing when the connection occurred. The record must include session start/join/leave/stop times.

If the Enterprise Voice, Video, and Messaging Endpoint does not produce session records containing the date and time when the connection occurred, this is a finding.

Check Content Reference

M

Target Key

5586