Title

The Unified Communications Endpoint must provide an explicit indication of current participants in all Videoconference (VC)-based and IP-based online meetings and conferences. (Cat II impact)

Discussion

Providing an explicit indication of current participants in teleconferences helps to prevent unauthorized individuals from participating in collaborative teleconference sessions without the explicit knowledge of other participants. Teleconferences allow groups of users to collaborate and exchange information. Without knowing who is in attendance, information could be compromised. Network elements that provide a teleconference capability must provide a clear indication of who is attending the meeting, thus providing all attendees with the capability to clearly identify users who are in attendance.

Check Content

Verify the Unified Communications Endpoint provides an explicit indication of current participants in all VC-based and IP-based online meetings and conferences. This excludes audio-only teleconferences using traditional telephony. If the Unified Communications Endpoint does not provide an explicit indication of current participants in all VC-based and IP-based online meetings and conferences, this is a finding.

Fix Text

Configure the Unified Communications Endpoint provides an explicit indication of current participants in all VC-based and IP-based online meetings and conferences.

Additional Identifiers

Rule ID: SRG-NET-000353-VVEP-00042_rule

Vulnerability ID: SRG-NET-000353-VVEP-00042

Group Title: SRG-NET-000353-VVEP-00042

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.