Tone Commander Secure SIP Phones Obtain Fresh JITC/STIG Certifications

	“Patton is helping agencies reduce risk and move forward with confidence" Burton A. Patton Chief Revenue Officer Patton, LLC

"The transition from the traditional JITC/APL process to the DISA Vendor STIG model is creating significant questions for government agencies, system integrators, and procurement teams," said Burton A. Patton, Patton’s Chief Revenue Officer. "By securing JITC certification before the transition and aligning our products with the security controls now emphasized under the Vendor STIG framework, Patton is helping agencies reduce risk and move forward with confidence."

Certified for Today's DoD Communications Environment

Under the certification, Tone Commander IP Phones were validated as interoperable with multiple DoD-approved session control platforms, including solutions from NEC, REDCOM, Ribbon, and Unify.

The certified platforms provide:

• AS-SIP interoperability for DoD Unified Capabilities environments
• Dual-stack IPv4 and IPv6 operation
• TLS-secured signaling and SRTP-protected media
• PKI-based authentication
• Voice VLAN support and 802.1X network access control integration
• Support for deployment in enterprise and mission-critical communications environments

JITC testing confirmed compliance with all applicable interoperability requirements and identified no certification conditions remaining.

Security Alignment Beyond Certification

As the DoD moves away from a centralized Approved Products List (APL) toward agency-specific Risk Management Framework (RMF) implementations, cybersecurity posture and STIG alignment have become increasingly important factors in procurement decisions. Future compliance with the UCR-CORE requirements will be addressed once that guidance is approved and released.
 
Patton's certification package included assessment against the Enterprise Voice, Video and Messaging Endpoint Security Requirements Guide (EVVM Endpoint SRG) and related policy controls. All applicable controls were assessed as compliant, with no open findings.

Highlights include:

• FIPS-compliant cryptographic implementation options
• TLS 1.2 and TLS 1.3 support
• Secure password and credential management
• Protected audit logging and SIEM integration
• STIG-aligned security configuration baselines
• Restricted services, ports, and protocols
• Real-time audit event export capabilities

The platform utilizes OpenSSL 3.x cryptographic technology and supports FIPS-enabled operation for agencies requiring validated cryptographic controls.

The recent sunset of the centralized DoDIN APL process has shifted responsibility for cybersecurity validation and configuration guidance toward Vendor STIGs, RMF authorization activities, UCR-CORE, and mission-specific acquisition requirements.

For government customers, this means product selection increasingly depends on documented security controls, configuration guidance, interoperability evidence, and vendor expertise.
Patton believes its combination of legacy JITC certification, documented STIG compliance, and deep experience in secure voice communications uniquely positions the company to help agencies navigate this new environment.

"Organizations are no longer simply checking whether a product appears on a centralized list," added Robert Mohr, Head of Pattons Government Solutions Group, "They need partners who understand interoperability, cybersecurity controls, Vendor STIG requirements, and mission-specific implementation challenges. That is where Patton brings value."

Patton continues to invest in the Tone Commander platform and plans to submit a future software release incorporating enhanced cryptographic capabilities, expanded TLS security controls, and support for newer FIPS 140-3 validated cryptographic modules to further extend compliance life cycles for government deployments.

For more information about Patton Tone Commander products, JITC certification status, STIG alignment, and security for Unified Capabilities deployments, visit www.patton.com.

Get the free white paper. . .

Navigating the Transition from JITC Certification to DISA Vendor STIGs

About Tone Commander

Tone Commander has a rich history of designing and manufacturing highly secure, military-grade VoIP and TSG-6 endpoints for the DoD branches and Civilian Government Agencies. We partner with the top prime and sub-prime contractors who serve the Federal markets by deploying our secure endpoints globally. To date, Tone Commander has deployed over 100,000 phones in federal government, military and civilian facilities worldwide. Patton acquired Tone Commander in September 2023.

About Patton

Patton is a world-renowned US manufacturer of networking and communications technology, products, and services. Patton produces a broad selection of technology solutions built on VoIP, Ethernet extension, wireless communication, and fiber-optic products. Founded in 1984 and headquartered in Gaithersburg, MD, USA, Patton has a strong global presence with a reputation for delivering innovative and reliable solutions to a diverse customer base.  Let’s Connect!

###

Media Contact: Glendon Flowers | +1 301 975 1000 | [email protected]