STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing where the connection occurred.

DISA Rule

SV-259957r948838_rule

Vulnerability Number

V-259957

Group Title

SRG-NET-000076

Rule Version

SRG-NET-000076-VVEP-00024

Severity

CAT II

CCI(s)

• CCI-000132 - Ensure that audit records containing information that establishes where the event occurred.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint to produce session records containing where the connection occurred.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint produces session records containing where the connection occurred. The record must include IP addresses and port numbers.

If the Enterprise Voice, Video, and Messaging Endpoint does not produce session records containing where the connection occurred, this is a finding.

Vulnerability Number

V-259957

Documentable

False

Rule Version

SRG-NET-000076-VVEP-00024

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint produces session records containing where the connection occurred. The record must include IP addresses and port numbers.

If the Enterprise Voice, Video, and Messaging Endpoint does not produce session records containing where the connection occurred, this is a finding.

Check Content Reference

M

Target Key

5586