Title

The Unified Communications Session Manager must be configured to limit and reserve bandwidth based on priority of the traffic type. (Cat II impact)

Discussion

Without the implementation of safeguards which allocate network communication resources based on priority, network availability, and particularly high priority traffic, may be dropped or delayed. DOD supporting C2 communications relies on the implementation of MLPP to ensure that flag officers and senior staff are provided higher priority for communications than other users. For VoIP and videoconferencing systems, Unified Communications Session Managers must communicate using protocols and services that provide expedited packets to users and other systems. Additionally, Quality of Service (QoS) is an effective security safeguard used to ensure network communications availability based on priority. Different applications and other network traffic have unique requirements and toleration levels for delay, jitter, bandwidth, packet loss, and availability. To manage the multitude of applications and services, a network requires a QoS framework to differentiate traffic and provide a method to avoid and manage network congestion. When network congestion occurs, all traffic has an equal chance of being dropped. A QoS implementation categorizes network traffic into classes and provides priority treatment based on the classification.

Check Content

Verify the Unified Communications Session Manager limits and reserves bandwidth based on priority of the traffic type. If the Unified Communications Session Manager does not limit and reserve bandwidth based on priority of the traffic type, this is a finding.

Fix Text

Configure the Unified Communications Session Manager to limit and reserve bandwidth based on priority of the traffic type.

Additional Identifiers

Rule ID: SRG-NET-000363-VVSM-00019_rule

Vulnerability ID: SRG-NET-000363-VVSM-00019

Group Title: SRG-NET-000363-VVSM-00019

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.