STIGQter: STIG Summary: Video Services Policy STIG Version: 1 Release: 11 Benchmark Date: 24 Apr 2020:

IP-based VTC systems must not connect to ISDN lines when connected to a classified network.

DISA Rule

SV-55746r2_rule

Vulnerability Number

V-43017

Group Title

RTS-VTC 7040

Rule Version

RTS-VTC 7040

Severity

CAT I

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Do not simultaneously connect ISDN lines to a VTC CODEC if the CODEC connects to a classified IP network.

Check Contents

Review the VTC system architecture and inspect the VTC CODEC to verify that ISDN lines are not connected directly to the CODEC if it connects to a classified IP network (e.g., SIPRNet, JWICS) at any time. If they are, this is a finding.

Note: If the VTC system is used to support multiple networks having different classification levels, and the ISDN lines are isolated from classified IP, they must meet periods processing requirements.

Vulnerability Number

V-43017

Documentable

False

Rule Version

RTS-VTC 7040

Severity Override Guidance

Review the VTC system architecture and inspect the VTC CODEC to verify that ISDN lines are not connected directly to the CODEC if it connects to a classified IP network (e.g., SIPRNet, JWICS) at any time. If they are, this is a finding.

Note: If the VTC system is used to support multiple networks having different classification levels, and the ISDN lines are isolated from classified IP, they must meet periods processing requirements.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

1418

Comments