NET0405 - A service or feature that calls home to the vendor must be disabled.

Information

Call home services or features will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. The risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.

NOTE: Nessus has provided the target output to assist in reviewing the benchmark to ensure target compliance.

Solution

Configure the network device to disable the call home service or feature.

The command below will disable the call-home service on a Cisco device.
Example:
hostname(config)# no service call-home

See Also

https://iasecontent.disa.mil/stigs/zip/U_Network_Perimeter_Router_L3_Switch_V8R32_STIG.zip

Item Details

Category: ACCESS CONTROL

References: 800-53|AC-6(10), CAT|II, Rule-ID|SV-36774r5_rule, STIG-ID|NET0405, Vuln-ID|V-28784

Plugin: Cisco

Control ID: e7c20cdc490f37eceb550b6092757878b1b13ba26076118f773837046f46084b