Microsoft Skype for Business 2016 Security Technical Implementation Guide

The Microsoft Skype for Business 2016 Security Technical Implementation Guide (V2 R1) has 4 STIG checks. New to STIG checklists? Read What is a STIG checklist?, CKL vs CKLB, and STIG vs SCAP benchmark.

Find STIG checks

4STIG checks

Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.

Severity

Version

V2 · R1

CurrentPublished Mon Jan 05 2026 What changed in V2R1

In the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.

Microsoft Skype for Business 2016 Security Technical Implementation Guide

Assessment Title

Rule Text

In the event a secure Session Initiation Protocol (SIP) connection fails, the connection must be restricted from resorting to the unencrypted HTTP.

Description

Discussion Text

Prevents from HTTP being used for SIP connection in case TLS or TCP fail.

New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.

Objective

V-238107

Rule

SV-238107r1043178_rule

Severity

medium

Rule Version

DTOO422

Documentable

false

IA Controls

NIST SP 800-53

Rev 5

Assessment Procedure

Check Text

Verify the policy value for Computer Configuration -> Administrative Templates -> Skype for Business 2016 -> Microsoft Lync Feature Policies "Disable HTTP fallback for SIP connection" is set to "Enabled".

Procedure: Use the Windows Registry Editor to navigate to the following key: 

HKLM\Software\Policies\Microsoft\office\16.0\lync

Criteria: If the value disablehttpconnect is REG_DWORD = 1, this is not a finding.

Implementation Procedure

Fix Text

Set the policy value for Computer Configuration -> Administrative Templates -> Skype for Business 2016 -> Microsoft Lync Feature Policies "Disable HTTP fallback for SIP connection" to "Enabled".

STIG check 3 of 4 in the Microsoft Skype for Business 2016 STIG checklist

← Previous · V-238106Session Initiation Protocol (SIP) security mode must be configured.Next · V-279949 →The version of Skype running on the system must be a supported version.