1.2.4 Ensure HTTP and Telnet options are disabled for all management profiles - HTTP

Information

HTTP and Telnet options should not be enabled for device management.

Rationale:

Management access over cleartext services such as HTTP or Telnet could result in a compromise of administrator credentials and other sensitive information related to device management.

Solution

Navigate to Network > Network Profiles > Interface Management.
For each Profile, set the HTTP and Telnet boxes to unchecked.

See Also

https://workbench.cisecurity.org/benchmarks/8826