Skip to content

An IP-based VTC system implementing a single CODEC that supports conferences on multiple networks with different classification levels (i.e., unclassified, SECRET, TOP SECRET, TS-SCI) must support Periods Processing by connecting the CODEC to one network at a time, matching the classification level of the session to the classification level of the network.

An XCCDF Rule

Description

Connecting to networks of different classifications simultaneously incurs the risk of data from a higher classification being released to a network of a lower classification, referred to as a "spill". It is imperative that networks of differing classification levels or with differing handling caveats not be interconnected at any time. Separation in a multinetwork VTC system is maintained by the use of an A/B, A/B/C, or A/B/C/D switch that meets requirements for channel isolation or by manual connection of the CODEC to one network at a time.

ID
SV-259893r948737_rule
Version
SRG-VOIP-000130
Severity
High
References
Updated

Remediation Templates

A Manual Procedure

Obtain and install an approved A/B, A/B/C, or A/B/C/D switch. 

Alternately, manually connect the VTC CODEC to one network at a time through the use of a single patch cord.