Navigate

Check: SRG-NET-000512-VVEP-00050

Voice Video Endpoint SRG: SRG-NET-000512-VVEP-00050 (in versions v2 r2 through v1 r4)

Title

The Voice Video Endpoint auto-answer feature must be disabled. (Cat II impact)

Discussion

A Voice Video Endpoint set to automatically answer a call with audio or video capabilities enabled risks transmitting information not intended for the caller. In the event a Voice Video Endpoint automatically answered a call during a classified meeting or discussion. Potentially sensitive or classified information could be transmitted. The auto-answer feature must not be activated by a user unless the feature is required to satisfy mission requirements.

Check Content

Verify the Voice Video Endpoint auto-answer feature is disabled. If the Voice Video Endpoint auto-answer feature is not disabled, this is a finding.

Fix Text

Configure the Voice Video Endpoint auto-answer feature to be disabled.

Additional Identifiers

Rule ID: SV-206797r604140_rule

Vulnerability ID: V-206797

Group Title: SRG-NET-000512

Expert Comments

Expert comments are only available to logged-in users.

CCIs

CCIs tied to check.

Number	Definition
CCI-000366	The organization implements the security configuration settings.

Controls

Controls tied to check. These are derived from the CCIs shown above.

Number	Title
CM-6	Configuration Settings