STIGQter: STIG Summary: Cisco NX-OS Switch RTR Security Technical Implementation Guide Version: 2 Release: 1 Benchmark Date: 23 Apr 2021:

The Cisco switch must not be configured to have any feature enabled that calls home to the vendor.

DISA Rule

SV-221078r622190_rule

Vulnerability Number

V-221078

Group Title

SRG-NET-000131-RTR-000083

Rule Version

CISC-RT-000080

Severity

CAT II

CCI(s)

• CCI-002403 - The information system only allows incoming communications from organization-defined authorized sources routed to organization-defined authorized destinations.

Weight

10

Fix Recommendation

Disable the call home feature as shown below:

SW1(config)# callhome
SW1(config-callhome)# no enable
SW1(config-callhome)# end

Check Contents

Review the switch configuration to determine if the call home service is enabled as shown in the example below:

callhome
contract-id CompanyXYZ
customer-id CompanyXYZ
email-contact netadmin@CompanyXYZ.com
phone-contact +1-800-555-4567
enable

If the call home feature is configured to call home to the vendor, this is a finding.

Vulnerability Number

V-221078

Documentable

False

Rule Version

CISC-RT-000080

Severity Override Guidance

Review the switch configuration to determine if the call home service is enabled as shown in the example below:

callhome
contract-id CompanyXYZ
customer-id CompanyXYZ
email-contact netadmin@CompanyXYZ.com
phone-contact +1-800-555-4567
enable

If the call home feature is configured to call home to the vendor, this is a finding.

Check Content Reference

M

Target Key

4075

Comments