The organization must document the bidirectional enclave boundary protection used between the local Voice Video system management network and the DISN Voice Services management network.

From Voice Video Policy Security Technical Implementation Guide

Part of SRG-POL-400019

Associated with: CCI-002073

VVSP-01-000045_rule The organization must document the bidirectional enclave boundary protection used between the local Voice Video system management network and the DISN Voice Services management network.

Vulnerability discussion

Organizations must carefully consider the risks that may be introduced when information systems (i.e., system interconnections) are connected to other systems with different security requirements and security controls, both within organizations and external to organizations. Authorizing Officials determine the risk associated with information system connections and the appropriate controls employed. Risk considerations also include information systems sharing the same networks. Voice Video system devices and circuit-switched telecom switches may be connected to multiple management networks. Several management networks may have connectivity through the local management VLAN or dedicated OOB management network. Managing or monitoring the Voice Video system devices under local management may require segmentation from other management networks. When networks are interconnected and both management networks have access to the same devices via a single management port, each of these management networks is a different enclave. The access and traffic between them must be filtered to protect each from compromise by another.

Check content

Review each Voice Video system security plan (SSP). Confirm the organization documents the bidirectional enclave boundary protection (e.g., firewall) used between the local Voice Video system management network and the DISN Voice Services management network. Verify the owner responsible for the enclave boundary protection device configuration and management. This device may be owned and operated by the DISN management network or the local network or may be two devices owned and operated by each entity. If the organization does not document the bidirectional enclave boundary protection used between the local Voice Video system management network and the DISN Voice Services management network, this is a finding.

Fix text

Document the bidirectional enclave boundary protection used between the local Voice Video system management network and the DISN Voice Services management network. This commonly is a firewall owned and operated by the DISN management network or the local network or two devices owned and operated by each entity.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer