Title

VVoIP core components are not assigned static addresses within the dedicated VVoIP address space (Cat II impact)

Discussion

Assigning static addresses to core VVoIP devices permits tighter control using ACLs on firewalls and routers to help in the protection of these devices.

Check Content

Interview the IAO to confirm compliance with the following requirement: Ensure static addresses are assigned to the VVoIP core components within the dedicated VVoIP address space.

Fix Text

Ensure static addresses are assigned to the VVoIP core components within the dedicated VVoIP address space. When defining the VVoIP system implementation plan and addressing scheme, assign static addresses to the VVoIP core components

Additional Identifiers

Rule ID: SV-21607r1_rule

Vulnerability ID: V-19545

Group Title: Deficient design: VVoIP addressing re: core comp.

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.