Skip to content

I - Mission Critical Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-NET-000042

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to retain the Standard Mandatory DOD Notice and Consent Banner on the screen until users acknowledge the usage conditions and take explicit actions to log on for further access.

    &lt;VulnDiscussion&gt;The banner must be acknowledged by the user prior to allowing the user access to the network. This provides assurance that th...
    Rule Medium Severity
  • SRG-NET-000048

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must notify the user, upon successful logon (access) to the network element, of the date and time of the last logon (access).

    &lt;VulnDiscussion&gt;Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the date a...
    Rule Medium Severity
  • SRG-NET-000049

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must notify the user, upon successful logon (access), of the number of unsuccessful logon (access) attempts since the last successful logon (access).

    &lt;VulnDiscussion&gt;Users need to be aware of activity that occurs regarding their account. Providing users with information regarding the number...
    Rule Medium Severity
  • SRG-NET-000053

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to limit the number of concurrent sessions to an organizationally defined number.

    &lt;VulnDiscussion&gt;Enterprise Voice, Video, and Messaging Endpoint management includes the ability to control the number of user sessions and li...
    Rule Medium Severity
  • SRG-NET-000074

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing what type of connection occurred.

    &lt;VulnDiscussion&gt;Session records are commonly produced by session management and border elements. Many Enterprise Voice, Video, and Messaging ...
    Rule Medium Severity
  • SRG-NET-000075

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing when (date and time) the connection occurred.

    &lt;VulnDiscussion&gt;Session records are commonly produced by session management and border elements. Many Enterprise Voice, Video, and Messaging ...
    Rule Medium Severity
  • SRG-NET-000076

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing where the connection occurred.

    &lt;VulnDiscussion&gt;Session records are commonly produced by session management and border elements. Many Enterprise Voice, Video, and Messaging ...
    Rule Medium Severity
  • SRG-NET-000077

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing the source of the connection.

    &lt;VulnDiscussion&gt;Session records are commonly produced by session management and border elements. Many Enterprise Voice, Video, and Messaging ...
    Rule Medium Severity
  • SRG-NET-000078

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing the outcome of the connection.

    &lt;VulnDiscussion&gt;Session records are commonly produced by session management and border elements. Many Enterprise Voice, Video, and Messaging ...
    Rule Medium Severity
  • SRG-NET-000079

    <GroupDescription></GroupDescription>
    Group
  • The Enterprise Voice, Video, and Messaging Endpoint must be configured to produce session (call detail) records containing the identity of all users.

    &lt;VulnDiscussion&gt;Without information that establishes the identity of the subjects (i.e., users or processes acting on behalf of users) associ...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules