Check: SRG-NET-000512-VVEP-00102
Enterprise Voice, Video, and Messaging Endpoint SRG:
SRG-NET-000512-VVEP-00102
(in versions v1 r2 through v1 r1)
Title
The Enterprise Voice, Video, and Messaging Endpoint must be configured to dynamically implement configuration file changes. (Cat II impact)
Discussion
Configuration management includes the management of security features and assurances through control of changes made to device hardware, software, and firmware throughout the life cycle of a product. Secure configuration management relies on performance and functional attributes of products to determine the appropriate security features and assurances used to measure a system configuration state. When configuration changes are made, it is critical for those changes to be implemented by the Enterprise Voice, Video, and Messaging Endpoint as quickly as possible. This ensures that Enterprise Voice, Video, and Messaging Endpoints communicate using the correct address books, session managers, gateways, and border elements.
Check Content
Verify the Enterprise Voice, Video, and Messaging Endpoint dynamically implements configuration file changes. If the Enterprise Voice, Video, and Messaging Endpoint does not dynamically implement configuration file changes, this is a finding.
Fix Text
Configure the Enterprise Voice, Video, and Messaging Endpoint to dynamically implement configuration file changes.
Additional Identifiers
Rule ID: SV-259981r948910_rule
Vulnerability ID: V-259981
Group Title: SRG-NET-000512
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-000366 |
Implement the security configuration settings. |
Controls
Number | Title |
---|---|
CM-6 |
Configuration Settings |