The Enterprise Voice, Video, and Messaging Session Manager must be configured to require Voice Video peers to re-register (reauthenticate) at least every hour.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-260026 | SRG-NET-000338-VVSM-00102 | SV-260026r953984_rule | CCI-002039 | medium |
| Description | ||||
| Device registration is a solution enabling an organization to manage devices. It is an additional layer of authentication ensuring only specific pre-authorized devices can access the system. Registration is the process of authorizing endpoints to communicate with the session manager. Registration occurs with the SIP server in VoIP systems and with a gatekeeper in H.323 systems. Without enforcing registration, an adversary could impersonate a legitimate device on the Voice Video network. | ||||
| STIG | Date | |||
| Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide | 2024-03-11 | |||
Details
Check Text (C-260026r953984_chk)
Verify the Enterprise Voice, Video, and Messaging Session Manager requires Voice Video peers to re-register (reauthenticate) at least every hour.
If the Enterprise Voice, Video, and Messaging Session Manager does not require Voice Video peers to re-register (reauthenticate) at least every hour, this is a finding.
Fix Text (F-63664r949038_fix)
Configure the Enterprise Voice, Video, and Messaging Session Manager to re-register (reauthenticate) Voice Video peers at least every hour.