Skip to content

II - Mission Support Sensitive

Rules and Groups employed by this XCCDF Profile

  • The Session Border Controller (SBC) must filter inbound SIP and AS-SIP traffic based on the IP addresses of the internal Enterprise Session Controller (ESC), Local Session Controller (LSC), or Multifunction Soft Switch (MFSS).

    <VulnDiscussion>The SBC is in the VVoIP signaling between the LSC and MFSS. To limit exposure to compromise and denial of service, the SBC mu...
    Rule Medium Severity
  • SRG-VOIP-000480

    <GroupDescription></GroupDescription>
    Group
  • The Session Border Controller (SBC) must be configured to terminate and decrypt inbound and outbound SIP and AS-SIP sessions to ensure proper management for the transition of the SRTP/SRTCP streams.

    &lt;VulnDiscussion&gt;The function of the SBC is to manage SIP and AS-SIP signaling messages. To perform its proper function in the enclave boundar...
    Rule Medium Severity
  • SRG-VOIP-000490

    <GroupDescription></GroupDescription>
    Group
  • The Session Border Controller (SBC) must be configured to only process packets authenticated from an authorized source within the DISN IPVS network.

    &lt;VulnDiscussion&gt;The function of the SBC is to manage SIP and AS-SIP signaling messages. The SBC also authenticates SIP and AS-SIP signaling m...
    Rule Medium Severity

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules