STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint must be configured to only use ports, protocols, and services allowed per the Ports, Protocols, and Services Management (PPSM) Category Assurance List (CAL) and Vulnerability Assessments (VAs).

DISA Rule

SV-259963r948856_rule

Vulnerability Number

V-259963

Group Title

SRG-NET-000132

Rule Version

SRG-NET-000132-VVEP-00059

Severity

CAT I

CCI(s)

• CCI-000382 - Configure the system to prohibit or restrict the use of organization-defined prohibited or restricted functions, system ports, protocols, software, and/or services.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint to only use ports, protocols, and services allowed per the PPSM CAL and VAs.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint only uses ports, protocols, and services allowed per the PPSM CAL and VAs. If the Enterprise Voice, Video, and Messaging Endpoint uses ports, protocols, and services not allowed per the PPSM CAL and VAs, this is a finding.

Vulnerability Number

V-259963

Documentable

False

Rule Version

SRG-NET-000132-VVEP-00059

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint only uses ports, protocols, and services allowed per the PPSM CAL and VAs. If the Enterprise Voice, Video, and Messaging Endpoint uses ports, protocols, and services not allowed per the PPSM CAL and VAs, this is a finding.

Check Content Reference

M

Target Key

5586