Check: SRG-NET-000334-VVSM-00039
Voice Video Session Management SRG:
SRG-NET-000334-VVSM-00039
(in versions v2 r2 through v1 r5)
Title
The Voice Video Session Manager must off-load session (call) records onto a different system or storage media. (Cat II impact)
Discussion
Information stored in one location is vulnerable to accidental or incidental deletion or alteration. Off-loading is a common process in information systems with limited session record storage capacity.
Check Content
Verify the Voice Video Session Manager off-loads session records onto a different system or storage media. If the Voice Video Session Manager does not off-load session records onto a different system or storage media, this is a finding.
Fix Text
Configure the Voice Video Session Manager to off-load session records onto a different system or storage media.
Additional Identifiers
Rule ID: SV-206843r508661_rule
Vulnerability ID: V-206843
Group Title: SRG-NET-000334
Expert Comments
CCIs
Number | Definition |
---|---|
CCI-001851 |
The information system off-loads audit records per organization-defined frequency onto a different system or media than the system being audited. |
Controls
Number | Title |
---|---|
AU-4 (1) |
Transfer To Alternate Storage |