Title

The Unified Communications Session Manager must be configured to uniquely identify and authenticate organizational users (or processes acting on behalf of organizational users). (Cat I impact)

Discussion

To assure accountability and prevent unauthenticated access, organizational users must be uniquely identified and authenticated to prevent potential misuse and compromise of the system. Sharing of accounts prevents accountability and non-repudiation. Organizational users must be uniquely identified and authenticated for all accesses.

Check Content

Verify the Unified Communications Session Manager uniquely identifies all users. If the Unified Communications Session Manager does not uniquely identify all users, then is a finding.

Fix Text

Configure the Unified Communications Session Manager to uniquely identify all users.

Additional Identifiers

Rule ID: SRG-NET-000138-VVSM-00101_rule

Vulnerability ID: SRG-NET-000138-VVSM-00101

Group Title: SRG-NET-000138-VVSM-00101

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.