Detections
Analytics

1.7 CISC-RT-000080

Warning! Audit Deprecated

This audit has been deprecated and will be removed in a future update.

View Next Audit Version

Information

The Cisco switch must not be configured to have any feature enabled that calls home to the vendor.

GROUP ID:V-221078
RULE ID:SV-221078r999687

Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.

Solution

Disable the call home feature as shown below:

SW1(config)# callhome
SW1(config-callhome)# no enable
SW1(config-callhome)# end

See Also

https://workbench.cisecurity.org/benchmarks/22581

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(11), CAT|II, CCI|CCI-002403, CSCv7|14.3, Rule-ID|SV-221078r999687_rule, STIG-ID|CISC-RT-000080

Plugin: Cisco

Control ID: 4d1f78a5865ab8720205a30da6abcb24dbb63d8e3c23bf73d6a74e4dfedf8413