The organizations System Security Plan (SSP) for the Voice Video system must document the network intrusion detection and protection system (IDPS) monitoring traffic to/from the Voice Video session border controller (SBC) and the traffic to/from the data firewall.

From Voice Video Policy Security Technical Implementation Guide

Part of SRG-POL-300611

Associated with: CCI-003072

VVSP-01-000157_rule The organizations System Security Plan (SSP) for the Voice Video system must document the network intrusion detection and protection system (IDPS) monitoring traffic to/from the Voice Video session border controller (SBC) and the traffic to/from the data firewall.

Vulnerability discussion

The information security architecture at the individual information system level must be consistent with and complement the more global, organization-wide information security architecture that is integral to and developed as part of the enterprise architecture. The information security architecture includes an architectural description, the placement/allocation of security functionality (including security controls), security-related information for external interfaces, information being exchanged across the interfaces, and the protection mechanisms associated with each interface.In addition, the security architecture can include other important security-related information, for example, user roles and access privileges assigned to each role; unique security requirements; the types of information processed, stored, and transmitted by the information system; restoration priorities of information and information system services; and any other specific protection needs.The IDPS must be implemented in such a manner that it monitors all traffic flowing through the data firewall and Voice Video SBC. Minimally, it detects improper data protocol traffic coming through the SBC. While the IDPS may not be able to inspect Voice Video media and signaling packet payload due to its encryption, it could detect anomalous behavior in the flow of these packets.

Check content

Review each organizational Voice Video SSP. Confirm the Voice Video system documents the network IDPS monitoring traffic to/from the Voice Video SBC and the traffic to/from the data firewall. In the event the Voice Video system within the enclave is interconnected with other Voice Video systems across the WAN, ensure the network IDPS is implemented such that it monitors the traffic to/from both the data firewall and the SBC. Confirm the design is documented accurately and implemented as documented. If the organizations Voice Video SSP does not document the network IDPS, this is a finding. If the Voice Video SSP does not document monitoring traffic to/from the Voice Video SBC and the traffic to/from the data firewall, this is a finding. If the documented design is not implemented, this is a finding. NOTE: The IDPS monitoring the Voice Video SBC may be the same device monitoring the data firewall or a separate device. In the event it is a separate device, it is subject to all Network Infrastructure STIG requirements, to include CNDSP monitoring, when applicable.

Fix text

Document in the Voice Video SSP the IDPS monitoring traffic to/from the Voice Video SBC and the traffic to/from the data firewall.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.

Powered by sagemincer