STIGQter: STIG Summary: Video Services Policy STIG Version: 1 Release: 11 Benchmark Date: 24 Apr 2020:

The implementation of an IP-based VTC system supporting conferences on multiple networks having different classification levels must maintain isolation between the networks to which it connects by implementing separation of equipment and cabling between the various networks having differing classification levels in accordance with CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance.

DISA Rule

SV-55754r2_rule

Vulnerability Number

V-43025

Group Title

RTS-VTC 7200

Rule Version

RTS-VTC 7200

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Install cabling and equipment in accordance with the CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance.
Depending on the TEMPEST ZONE, the separation requirements are:
- Minimum equipment separation - 50 cm or 1m
- Minimum cable separation - 5 cm or 15 cm

Check Contents

Review the documentation and based on the TEMPEST ZONE in the CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance, verify whether the required separations between RED and BLACK equipment and cables have been met. This includes cable routing inside equipment cabinets. Depending on the TEMPEST ZONE, the separation requirements are:
- Minimum equipment separation - 50 cm or 1m
- Minimum cable separation - 5 cm or 15 cm

If the cables or equipment are closer than the minimum cable and equipment separation distances, this is a finding.

In the event a CTTA has reviewed the system’s installation and provided a favorable report or certification, this is not a finding.

Vulnerability Number

V-43025

Documentable

False

Rule Version

RTS-VTC 7200

Severity Override Guidance

Review the documentation and based on the TEMPEST ZONE in the CNSSAM TEMPEST/01-13, RED/BLACK Installation Guidance, verify whether the required separations between RED and BLACK equipment and cables have been met. This includes cable routing inside equipment cabinets. Depending on the TEMPEST ZONE, the separation requirements are:
- Minimum equipment separation - 50 cm or 1m
- Minimum cable separation - 5 cm or 15 cm

If the cables or equipment are closer than the minimum cable and equipment separation distances, this is a finding.

In the event a CTTA has reviewed the system’s installation and provided a favorable report or certification, this is not a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

1418

Comments