The Enterprise Voice, Video, and Messaging Session Manager must be configured to terminate all network connections associated with a communications session at the end of the session.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-260013 | SRG-NET-000213-VVSM-00101 | SV-260013r949000_rule | CCI-001133 | medium |
| Description | ||||
| Terminating network connections associated with communications sessions includes, for example, de-allocating associated TCP/IP address/port pairs at the operating system level, and de-allocating networking assignments at the application level if multiple application sessions are using a single, operating system level network connection. Enterprise Voice, Video, and Messaging Session Managers do not conduct media session; they conduct the session termination signaling. Endpoints and border elements conduct the media sessions and de-allocate those resources. However, sessions that do not receive a response from the far end may require the session manager to request termination of communication sessions. | ||||
| STIG | Date | |||
| Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide | 2024-03-11 | |||
Details
Check Text (C-260013r949000_chk)
Verify the Enterprise Voice, Video, and Messaging Session Manager terminates all network connections associated with a communications session at the end of the session.
If the Enterprise Voice, Video, and Messaging Session Manager does not terminate all network connections associated with a communications session at the end of the session, this is a finding.
Fix Text (F-63651r948999_fix)
Configure the Enterprise Voice, Video, and Messaging Session Manager to terminate all network connections associated with a communications session at the end of the session.