STIGQter: STIG Summary: Voice/Video over Internet Protocol (VVoIP) STIG Version: 3 Release: 14 Benchmark Date: 26 Apr 2019:

The extension mobility feature must be globally disabled.

DISA Rule

SV-95685r2_rule

Vulnerability Number

V-80973

Group Title

VVoIP 1675

Rule Version

VVoIP 1675

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the extension mobility feature to be globally disabled on the VVoIP system.

Check Contents

If the extension mobility feature of the VVoIP system can be configured per user and is enabled, this is not applicable.

Interview the ISSO to validate compliance with the following requirement:

Verify the configuration for the extension mobility feature is globally disabled.

If the extension mobility feature is not globally disabled, this is a finding.

Vulnerability Number

V-80973

Documentable

False

Rule Version

VVoIP 1675

Severity Override Guidance

If the extension mobility feature of the VVoIP system can be configured per user and is enabled, this is not applicable.

Interview the ISSO to validate compliance with the following requirement:

Verify the configuration for the extension mobility feature is globally disabled.

If the extension mobility feature is not globally disabled, this is a finding.

Check Content Reference

M

Target Key

3407

Comments