STIGQter: STIG Summary: Voice Video Services Policy Security Technical Implementation Guide Version: 3 Release: 17 Benchmark Date: 25 Oct 2019:

The LAN supporting VVoIP services for command and control (C2) users must provide assured services in accordance with the Unified Capabilities Requirements (UCR).

DISA Rule

SV-8797r3_rule

Vulnerability Number

V-8302

Group Title

VVoIP 5105

Rule Version

VVoIP 5105

Severity

CAT III

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Implement and document that the LAN supporting VVoIP services for C2 users provides assured services in accordance with the UCR.

Check Contents

If the system does not support a minimum of 96 instruments, this requirement is not applicable.

Review site documentation to confirm the LAN supporting VVoIP services for C2 users provides assured services in accordance with the UCR. Specific attention should be given in the areas of:
- Bandwidth and traffic engineering (25% voice, 25% video, 50% data)
- No single point of failure affecting service to greater than 96 instruments.
- Equipment reliability
- Equipment redundancy above the access layer
- Equipment robustness and bandwidth capability
- Connection redundancy above the access layer
- Connection bandwidth capability
- Access layer switch size (number of phones served)
- Backup power for all equipment:
+ 2 hours for all equipment and instruments supporting C2 users
+ 8 hours for all equipment and instruments supporting Special-C2 users

If the LAN supporting VVoIP services for C2 users does not provide assured services in accordance with the UCR, this is a finding.

Vulnerability Number

V-8302

Documentable

False

Rule Version

VVoIP 5105

Severity Override Guidance

If the system does not support a minimum of 96 instruments, this requirement is not applicable.

Review site documentation to confirm the LAN supporting VVoIP services for C2 users provides assured services in accordance with the UCR. Specific attention should be given in the areas of:
- Bandwidth and traffic engineering (25% voice, 25% video, 50% data)
- No single point of failure affecting service to greater than 96 instruments.
- Equipment reliability
- Equipment redundancy above the access layer
- Equipment robustness and bandwidth capability
- Connection redundancy above the access layer
- Connection bandwidth capability
- Access layer switch size (number of phones served)
- Backup power for all equipment:
+ 2 hours for all equipment and instruments supporting C2 users
+ 8 hours for all equipment and instruments supporting Special-C2 users

If the LAN supporting VVoIP services for C2 users does not provide assured services in accordance with the UCR, this is a finding.

Check Content Reference

M

Responsibility

Information Assurance Officer

Target Key

594

Comments