Title

The Voice Video Endpoint auto-answer feature must be disabled. (Cat II impact)

Discussion

A Voice Video Endpoint set to automatically answer a call with audio or video capabilities enabled risks transmitting information not intended for the caller. In the event a Voice Video Endpoint automatically answered a call during a classified meeting or discussion. Potentially sensitive or classified information could be transmitted. The auto-answer feature must not be activated by a user unless the feature is required to satisfy mission requirements.

Check Content

Verify the Voice Video Endpoint auto-answer feature is disabled. If the Voice Video Endpoint auto-answer feature is not disabled, this is a finding.

Fix Text

Configure the Voice Video Endpoint auto-answer feature to be disabled.

Additional Identifiers

Rule ID: SV-206797r604140_rule

Vulnerability ID: V-206797

Group Title: SRG-NET-000512

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.