Search filters this STIG's checks locally. Separate terms must all match (use quotes for an exact phrase). A search you ran on the Search page carries over here.
Assessment Title
Rule Text
The sites enclave boundary protection must route DSN voice traffic via a local Media Gateway (MG) connected to a DSN service provider using the appropriate type of trunk based on the sites need to support C2 communications.
Description
Discussion Text
There are several reasons why DSN voice traffic must use a locally implemented MG connected to a DSN service provider using the appropriate type of trunk based on the site’s need to support C2 communications, including:
- VVoIP has the potential to significantly degrade the standard data enclave boundary protection when the data enclave firewall handles VVoIP traffic, unless specifically designed to. VVoIP must not traverse a standard data firewall except under certain circumstances.
- For confidentiality, use of a MG eliminates the need for encryption on an IP WAN by placing the voice traffic on a traditional TDM network where the communications are more secure. Physical access to the wire or TDM switch is required to compromise TDM communication.
- For availability and C2 support, VVoIP systems from different vendors may not be interoperable via IP. DoD’s efforts to develop interoperable standards with vendor assistance has reduced this risk.
- The use of a MG converts each vendor’s implementation to a common interoperable system, the TDM DSN.
- VVoIP has the potential to significantly degrade the standard data enclave boundary protection when the data enclave firewall handles VVoIP traffic, unless specifically designed to. VVoIP must not traverse a standard data firewall except under certain circumstances.
- For confidentiality, use of a MG eliminates the need for encryption on an IP WAN by placing the voice traffic on a traditional TDM network where the communications are more secure. Physical access to the wire or TDM switch is required to compromise TDM communication.
- For availability and C2 support, VVoIP systems from different vendors may not be interoperable via IP. DoD’s efforts to develop interoperable standards with vendor assistance has reduced this risk.
- The use of a MG converts each vendor’s implementation to a common interoperable system, the TDM DSN.
New to STIG checklists? Read What is a STIG checklist? and CKL vs CKLB.