The Enterprise Voice, Video, and Messaging Session Manager must be configured to authenticate each Voice Video Endpoint device before registration.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-260027 | SRG-NET-000343-VVSM-00101 | SV-260027r949042_rule | CCI-001958 | medium |
| Description | ||||
| Device registration is a solution enabling an organization to manage devices. It is an additional layer of authentication ensuring only specific pre-authorized devices and trunks can access the system. Registration is the process of authorizing endpoints and trunks to communicate with the session manager. Registration occurs with the SIP server in VoIP systems and with a gatekeeper in H.323 systems. Without enforcing registration, an adversary could impersonate a legitimate device or peer on the Voice Video network. | ||||
| STIG | Date | |||
| Enterprise Voice, Video, and Messaging Session Management Security Requirements Guide | 2025-12-30 | |||
Related Frameworks
4 paths across 3 frameworks
Related Frameworks
NIST 800-531 mapping
IA-3
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
NIST 800-1712 mappings
3.5.1
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
3.5.2
1.00
- DISA · V1R2 · disa_xccdf · related
- DISA · 2025-01-23 · disa_cci_list · equivalent
- NIST · Rev 2 (Feb 2020, errata Jan 2021) · nist_800_171_app_d · equivalent
CCI1 mapping
CCI-001958
1.00
- DISA · V1R2 · disa_xccdf · related
Details
Check Text (C-260027r949042_chk)
Verify the Enterprise Voice, Video, and Messaging Session Manager authenticates all Voice Video Endpoint devices before establishing any connection.
If the Enterprise Voice, Video, and Messaging Session Manager does not authenticate all Voice Video Endpoint devices before establishing any connection, this is a finding.
Fix Text (F-63665r949041_fix)
Configure the Enterprise Voice, Video, and Messaging Session Manager to authenticate all Voice Video Endpoint devices before registering those devices.