STIGQter: STIG Summary: Layer 2 Switch Security Technical Implementation Guide - Cisco Version: 8 Release: 27 Benchmark Date: 25 Jan 2019: A service or feature that calls home to the vendor must be disabled.

DISA Rule

SV-38003r3_rule

Vulnerability Number

V-28784

Group Title

Call home service is disabled.

Rule Version

NET0405

Severity

CAT II

CCI(s)

• CCI-000366 - The organization implements the security configuration settings.

Weight

10

Fix Recommendation

Configure the network device to disable the call home service or feature.

The command below will disable the call-home service on a Cisco device.
Example:
hostname(config)# no service call-home

Note: This feature can be enabled if the communication is only to a server residing in the local area network or enclave.

Check Contents

Review the device configuration to determine if the call home service or feature is disabled on the device. On a Cisco product, you will not see the call-home service in the running config unless it's enabled. If the call home service is enabled on the device, this is a finding.

Note: This feature can be enabled if the communication is only to a server residing in the local area network or enclave.

Vulnerability Number

V-28784

Documentable

False

Rule Version

NET0405

Severity Override Guidance

Review the device configuration to determine if the call home service or feature is disabled on the device. On a Cisco product, you will not see the call-home service in the running config unless it's enabled. If the call home service is enabled on the device, this is a finding.

Note: This feature can be enabled if the communication is only to a server residing in the local area network or enclave.

Check Content Reference

M

Responsibility

Network Security Officer

Target Key

512

Comments