Check: SRG-NET-000236-VVEP-00043
Voice Video Endpoint SRG:
SRG-NET-000236-VVEP-00043
(in versions v2 r2 through v1 r4)
Title
In the event of a device failure, hardware Voice Video Endpoints must preserve any information necessary to determine cause of failure and return to operations with least disruption to service. (Cat II impact)
Discussion
Failure in a known state can address safety or security in accordance with the mission needs of the organization. Failure to a known secure state helps prevent a loss of confidentiality, integrity, or availability in the event of a failure of the information system or a component of the system. Preserving network element state information helps to facilitate network element restart and return to the operational mode of the organization with less disruption to mission-essential processes.
Check Content
If the Voice Video Endpoint is not a hardware endpoint, this check procedure is Not Applicable. Verify that in the event of device failure, the hardware Voice Video Endpoint preserves any information necessary to determine cause of failure and return to operations with least disruption to service. If the hardware Voice Video Endpoint does not preserve any information necessary to determine cause of failure, this is a finding. If the hardware Voice Video Endpoint does not return to operations with least disruption to service after device failure, this is a finding.
Fix Text
Configure the hardware Voice Video Endpoint, in the event of device failure, to preserve any information necessary to determine cause of failure. Also configure the hardware Voice Video Endpoint to return to operations with least disruption to service.
Additional Identifiers
Rule ID: SV-206769r604140_rule
Vulnerability ID: V-206769
Group Title: SRG-NET-000236
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001665 |
The information system preserves organization-defined system state information in the event of a system failure. |
Controls
Number | Title |
---|---|
SC-24 |
Fail In Known State |