STIGQter: STIG Summary: Cisco IOS XE Router RTR Security Technical Implementation Guide Version: 2 Release: 2 Benchmark Date: 23 Apr 2021:

The Cisco router must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-216996r663924_rule

Vulnerability Number

V-216996

Group Title

SRG-NET-000131-RTR-000083

Rule Version

CISC-RT-000080

Severity

CAT II

CCI(s)

• CCI-002403 - The information system only allows incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Disable the call home feature as shown below:

R5(config)#no service call-home

Check Contents

Review the router configuration to determine if the call home service is enabled as shown in the example below:

service call-home
contact-email-addr username@example.com
phone-number "+1-800-555-4567"
customer-id "Customer1234"
contract-id "Company1234"

If the call home feature is configured to call home to the vendor, this is a finding.

Vulnerability Number

V-216996

Documentable

False

Rule Version

CISC-RT-000080

Severity Override Guidance

Review the router configuration to determine if the call home service is enabled as shown in the example below:

service call-home
contact-email-addr username@example.com
phone-number "+1-800-555-4567"
customer-id "Customer1234"
contract-id "Company1234"

If the call home feature is configured to call home to the vendor, this is a finding.

Check Content Reference

M

Target Key

4028

Comments