Detections
Analytics

ARBA-NT-001610 - AOS, when configured as a WLAN bridge, must not be configured to have any feature enabled that calls home to the vendor.

Information

Call-home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting.

There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack. (Refer to SRG-NET-000131-RTR-000083.)

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure AOS using the web interface:

1. Navigate to Configuration >> System >> More tab.
2. Expand "Phone Home".
3. Click the toggle button to disable "Phone Home".
4. Click Submit >> Pending Changes >> Deploy Changes.

See Also

https://dl.dod.cyber.mil/wp-content/uploads/stigs/zip/U_HPE_Aruba_Networking_AOS_Y26M04_STIG.zip

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-7(11), CAT|II, CCI|CCI-002403, Rule-ID|SV-266705r1040645_rule, STIG-ID|ARBA-NT-001610, Vuln-ID|V-266705

Plugin: ArubaOS

Control ID: fd0a8b7c016aa1679905e42de725d9906a8859690c6aa1451a8d02e438b99b44