STIGQter: STIG Summary: Cisco IOS Router RTR Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The Cisco router must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-216988r538977_rule

Vulnerability Number

V-216988

Group Title

SRG-NET-000131-RTR-000083

Rule Version

CISC-RT-000080

Severity

CAT II

CCI(s)

• CCI-002403 - The information system only allows incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Disable the call home feature as shown below.

R5(config)#no call-home

Check Contents

Review the router configuration to determine if the call home service is enabled as shown in the example below.

call-home
contact-email-addr username@example.com
phone-number "+1-800-555-4567"
customer-id "Customer1234"
contract-id "Company1234"

If the call home feature is configured to call home to the vendor, this is a finding.

Vulnerability Number

V-216988

Documentable

False

Rule Version

CISC-RT-000080

Severity Override Guidance

Review the router configuration to determine if the call home service is enabled as shown in the example below.

call-home
contact-email-addr username@example.com
phone-number "+1-800-555-4567"
customer-id "Customer1234"
contract-id "Company1234"

If the call home feature is configured to call home to the vendor, this is a finding.

Check Content Reference

M

Target Key

4027

Comments