What changed in Microsoft Lync 2013 STIG V1R5V1R5 changes

Microsoft Lync 2013 STIG V1R5 (2024-07-24) replaced V1R4 (2018-04-27): 4 checks added, 3 removed. It has 4 checks, against 3 in V1R4.

V1R5 checklistV1R4 checklist Compare V1R4 and V1R5 in STIG Compare

  • 4 added
  • 3 removed
  • 0 updated

Added in V1R5 (4)

  • V-242503CAT IIThe ability of Lync to store user passwords must be disabled.
  • V-242504CAT IISession Initiation Protocol (SIP) security mode must be configured.
  • V-242505CAT IIIn the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.
  • V-265903CAT IThe version of Lync running on the system must be a supported version.

Removed since V1R4 (3)

  • V-40776CAT IIThe ability of Lync to store user passwords must be disabled.
  • V-40777CAT IISession Initiation Protocol (SIP) security mode must be configured.
  • V-40778CAT IIIn the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.

How these changes are found

Checks are matched across the two releases by V-number. A check counts as updated when DISA gave it a new rule revision (the r number in its SV-…_rule id) and its title, severity, check text, fix text, discussion, CCIs or other fields changed — the same comparison STIG Compare makes. Added checks are new V-numbers; removed checks are V-numbers V1R5 no longer has.

Comparing other releases, or this one against an older release? Pick any two in STIG Compare.