STIGQter: STIG Summary: Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide Version: 1 Release: 3 Benchmark Date: 01 Jul 2026:

The Enterprise Voice, Video, and Messaging Session Manager must produce session (call) records containing the identity of the users and identifiers associated with the session.

DISA Rule

SV-260001r948964_rule

Vulnerability Number

V-260001

Group Title

SRG-NET-000079

Rule Version

SRG-NET-000079-VVSM-00101

Severity

CAT II

CCI(s)

• CCI-001487 - Ensure that audit records containing information that establishes the identity of any individuals, subjects, or objects/entities associated with the event.

Weight

10

Fix Recommendation

Configure the Enterprise Voice, Video, and Messaging Session Manager to produce session records containing the identity of the users and identifiers associated with the session.

Check Contents

Verify the Enterprise Voice, Video, and Messaging Session Manager produces session records containing the identity of the users and identifiers associated with the session. The identity of the users and identifiers of the call in this context would be the user ID or user name.

For Enterprise Voice, Video, and Messaging Session Managers that have the concept of a device rather than users and identifiers, this requirement is not applicable.

If the Enterprise Voice, Video, and Messaging Session Manager does not produce session records containing the identity of the users and identifiers associated with the session, this is a finding.

Vulnerability Number

V-260001

Documentable

False

Rule Version

SRG-NET-000079-VVSM-00101

Severity Override Guidance

Verify the Enterprise Voice, Video, and Messaging Session Manager produces session records containing the identity of the users and identifiers associated with the session. The identity of the users and identifiers of the call in this context would be the user ID or user name.

For Enterprise Voice, Video, and Messaging Session Managers that have the concept of a device rather than users and identifiers, this requirement is not applicable.

If the Enterprise Voice, Video, and Messaging Session Manager does not produce session records containing the identity of the users and identifiers associated with the session, this is a finding.

Check Content Reference

M

Target Key

5587