Detections
Analytics

1.7 CISC-RT-000080

Information

The Cisco switch must not be configured to have any feature enabled that calls home to the vendor.

GROUP ID:V-221078
RULE ID:SV-221078r999687

Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.

Solution

Disable the call home feature as shown below:

SW1(config)# callhome
SW1(config-callhome)# no enable
SW1(config-callhome)# end

See Also

https://workbench.cisecurity.org/benchmarks/26426

Item Details

Category: CONFIGURATION MANAGEMENT, SYSTEM AND SERVICES ACQUISITION, SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|CM-2, 800-53|CM-6, 800-53|CM-7, 800-53|CM-7(1), 800-53|CM-9, 800-53|SA-3, 800-53|SA-8, 800-53|SA-10, 800-53|SC-7(11), CCI|CCI-002403, CSCv7|14.3, Rule-ID|SV-221078r999687_rule, STIG-ID|CISC-RT-000080, Vuln-ID|V-221078

Plugin: Cisco

Control ID: 4d1f78a5865ab8720205a30da6abcb24dbb63d8e3c23bf73d6a74e4dfedf8413