Title

The Unified Communications Session Manager must be configured to authenticate each Voice Video peer (trunk) before registration. (Cat II impact)

Discussion

Device registration is a solution enabling an organization to manage devices. It is an additional layer of authentication ensuring only specific preauthorized devices and trunks can access the system. Registration is the process of authorizing endpoints and trunks to communicate with the session manager. Registration occurs with the SIP server in VoIP systems and with a gatekeeper in H.323 systems. Without enforcing registration, an adversary could impersonate a legitimate device or peer on the Voice Video network.

Check Content

Verify the Unified Communications Session Manager authenticates all Voice Video peers (trunks) before establishing any connection. If the Unified Communications Session Manager does not authenticate all Voice Video peers (trunks) before establishing any connection, this is a finding.

Fix Text

Configure the Unified Communications Session Manager to authenticate all Voice Video peers (trunks) before registration.

Additional Identifiers

Rule ID: SRG-NET-000343-VVSM-00102_rule

Vulnerability ID: SRG-NET-000343-VVSM-00102

Group Title: SRG-NET-000343-VVSM-00102

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.