STIGQter: STIG Summary: Cisco IOS XR Router RTR Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Oct 2020:

The Cisco router must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-217004r538985_rule

Vulnerability Number

V-217004

Group Title

SRG-NET-000131-RTR-000083

Rule Version

CISC-RT-000080

Severity

CAT II

CCI(s)

• CCI-002403 - The information system only allows incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Disable the call home feature as shown below.

RP/0/0/CPU0:R3(config)#no call-home

Check Contents

Review the router configuration to determine if the call home feature is enabled as shown in the example below.

call-home
contract-id Company1234
customer-id Customer1234
phone-number +1-800-555-4567
contact-email-addr username@example.com

If the call home feature is configured to call home to the vendor, this is a finding.

Vulnerability Number

V-217004

Documentable

False

Rule Version

CISC-RT-000080

Severity Override Guidance

Review the router configuration to determine if the call home feature is enabled as shown in the example below.

call-home
contract-id Company1234
customer-id Customer1234
phone-number +1-800-555-4567
contact-email-addr username@example.com

If the call home feature is configured to call home to the vendor, this is a finding.

Check Content Reference

M

Target Key

4029

Comments