The Enterprise Voice, Video, and Messaging Session Manager must be configured to provide an indication of current participants in all calls, meetings, and conferences.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-260029 | SRG-NET-000353-VVSM-00101 | SV-260029r949048_rule | CCI-000366 | medium |
| Description | ||||
| Providing an explicit indication of current participants in videoconferences helps to prevent unauthorized individuals from participating in collaborative videoconference sessions without the explicit knowledge of other participants. videoconferences allow groups of users to collaborate and exchange information. Without knowing who is in attendance, information could be compromised. For videoconferences with large numbers of people present, the identified participant may be listed as the room rather than by each individual attending. Enterprise Voice, Video, and Messaging Session Managers that provide a videoconference capability must provide a clear indication of who is attending the meeting, thus providing all attendees with the capability to clearly identify users who are in attendance. | ||||
| STIG | Date | |||
| Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide | 2024-03-11 | |||
Details
Check Text (C-260029r949048_chk)
Verify the Enterprise Voice, Video, and Messaging Session Manager provides an indication of current participants in all calls, meetings, and conferences.
If the Enterprise Voice, Video, and Messaging Session Manager does not provide an indication of current participants in all calls, meetings and conferences, this is a finding.
Fix Text (F-63667r949047_fix)
Configure the Enterprise Voice, Video, and Messaging Session Manager to provide an indication of current participants in all calls, meetings, and conferences.