STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint must be configured to use cryptographic algorithms approved by NSA to protect NSS when transporting classified traffic across an unclassified network.

DISA Rule

SV-259971r1117244_rule

Vulnerability Number

V-259971

Group Title

SRG-NET-000352

Rule Version

SRG-NET-000352-VVEP-00038

Severity

CAT II

CCI(s)

• CCI-002450 - Implement organization-defined types of cryptography for each specified cryptography use.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint processing classified information over public networks to implement NSA-approved cryptography.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint processing classified information over public networks implements NSA-approved cryptography.

If the Enterprise Voice, Video, and Messaging Endpoint processing classified information over public networks does not implement NSA-approved cryptography, this is a finding.

Vulnerability Number

V-259971

Documentable

False

Rule Version

SRG-NET-000352-VVEP-00038

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint processing classified information over public networks implements NSA-approved cryptography.

If the Enterprise Voice, Video, and Messaging Endpoint processing classified information over public networks does not implement NSA-approved cryptography, this is a finding.

Check Content Reference

M

Target Key

5586