STIGQter: STIG Summary: Cisco IOS-XE Switch RTR Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Cisco switch must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-220993r622190_rule

Vulnerability Number

V-220993

Group Title

SRG-NET-000131-RTR-000083

Rule Version

CISC-RT-000080

Severity

CAT II

CCI(s)

• CCI-002403 - The information system only allows incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Disable the call home feature as shown below:

SW1(config)#no call-home

Check Contents

Review the switch configuration to determine if the call home service is enabled as shown in the example below:

call-home
contact-email-addr username@example.com
phone-number "+1-800-555-4567"
customer-id "Customer1234"
contract-id "Company1234"

If the call home feature is configured to call home to the vendor, this is a finding.

Vulnerability Number

V-220993

Documentable

False

Rule Version

CISC-RT-000080

Severity Override Guidance

Review the switch configuration to determine if the call home service is enabled as shown in the example below:

call-home
contact-email-addr username@example.com
phone-number "+1-800-555-4567"
customer-id "Customer1234"
contract-id "Company1234"

If the call home feature is configured to call home to the vendor, this is a finding.

Check Content Reference

M

Target Key

4074

Comments