STIGQter: STIG Summary: HPE Aruba Networking AOS Wireless Security Technical Implementation Guide Version: 1 Release: 2 Benchmark Date: 01 Apr 2026:

AOS, when configured as a WLAN bridge, must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-266705r1040645_rule

Vulnerability Number

V-266705

Group Title

SRG-NET-000131

Rule Version

ARBA-NT-001610

Severity

CAT II

CCI(s)

CCI-002403 - Only allow incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

Fix Recommendation

Configure AOS using the web interface:

1. Navigate to Configuration >> System >> More tab.
2. Expand "Phone Home".
3. Click the toggle button to disable "Phone Home".
4. Click Submit >> Pending Changes >> Deploy Changes.

Check Contents

Verify the AOS configuration using the web interface:

1. Navigate to Configuration >> System >> More tab.
2. Expand "Phone Home ".

If "Phone Home" is enabled, this is a finding.

Vulnerability Number

V-266705

Documentable

False

Rule Version

ARBA-NT-001610

Severity Override Guidance

Verify the AOS configuration using the web interface:

1. Navigate to Configuration >> System >> More tab.
2. Expand "Phone Home ".

If "Phone Home" is enabled, this is a finding.

Check Content Reference

Target Key

5646