V-259919
Enterprise Voice, Video, and Messaging Policy Security Requirements Guide
Title
Enclaves with commercial VoIP connections must be approved by the DODIN Waiver Panel and signed by DOD CIO for a permanent alternate connection to the Internet Telephony Service Provider (ITSP).
Description
<VulnDiscussion>The DOD requires the use of DISN services as the first choice to meet core communications needs. When additional services for SIP trunks are necessary, an ITSP may provide an "alternate connection", but this requires approval by the DODIN Waiver Panel and signature by the DOD CIO. Local ISP connections provide an internet pathway into the DISN, placing the DODIN directly at risk for exploitation. A local ISP connection can circumnavigate DOD protections of the DISN at its bound...
Fix Text (Documentation Requirement)
Obtain approval by the DODIN Waiver Panel and signature by the DOD CIO for a permanent "alternate connection" to the ITSP for any connection with a commercial VoIP provider (ITSP).