Skip to content
ATO Pathways
  Log In

Enterprise Voice, Video, and Messaging Policy Security Requirements Guide

Rules, Groups, and Values defined within the XCCDF Benchmark

  • The Session Border Controller (SBC) (or similar firewall type device) must perform stateful inspection and packet authentication for all VVoIP traffic (inbound and outbound) and deny all other packets.

    <VulnDiscussion>Once a pinhole is opened in the enclave boundary for a known session, the packets that are permitted to pass must be managed....
    Rule High Severity
    Show

  • SRG-VOIP-000550

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Session Border Controller (SBC) (or similar firewall type device) must deny all packets traversing the enclave boundary (inbound or outbound) through the IP port pinholes opened for VVoIP sessions, except RTP/RTCP, SRTP/SRTCP, or other protocol/flow established by signaling messages.

    &lt;VulnDiscussion&gt;Once a pinhole is opened in the enclave boundary for a known session, the packets that are permitted to pass must be managed....
    Rule High Severity
    Show

  • SRG-VOIP-000560

    <GroupDescription></GroupDescription>
    Group
    Show

  • The Session Border Controller (SBC) must be configured to notify system administrators and the information system security officer (ISSO) when attempts to cause a denial of service (DoS) or other suspicious events are detected.

    &lt;VulnDiscussion&gt;Action cannot be taken to thwart an attempted DOS or compromise if the system administrators responsible for the operation of...
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules