STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Endpoint Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Oct 2025:

The Enterprise Voice, Video, and Messaging Endpoint must prohibit client negotiation to TLS 1.1, TLS 1.0, SSL 2.0, or SSL 3.0.

DISA Rule

SV-259986r948925_rule

Vulnerability Number

V-259986

Group Title

SRG-NET-000530

Rule Version

SRG-NET-000530-VVEP-00101

Severity

CAT I

CCI(s)

• CCI-001453 - Implement cryptographic mechanisms to protect the integrity of remote access sessions.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Endpoint to prohibit client negotiation to TLS 1.1, TLS 1.0, SSL 2.0, or SSL 3.0.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Endpoint prohibits client negotiation to TLS 1.1, TLS 1.0, SSL 2.0, and SSL 3.0.

If the Enterprise Voice, Video, and Messaging Endpoint does not prohibit client negotiation to TLS 1.1, TLS 1.0, SSL 2.0, and SSL 3.0, this is a finding.

Vulnerability Number

V-259986

Documentable

False

Rule Version

SRG-NET-000530-VVEP-00101

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Endpoint prohibits client negotiation to TLS 1.1, TLS 1.0, SSL 2.0, and SSL 3.0.

If the Enterprise Voice, Video, and Messaging Endpoint does not prohibit client negotiation to TLS 1.1, TLS 1.0, SSL 2.0, and SSL 3.0, this is a finding.

Check Content Reference

M

Target Key

5586