← Back to Network WLAN Bridge Platform Security Technical Implementation Guide

V-243232

CAT II (Medium)

The network device must not be configured to have any feature enabled that calls home to the vendor.

Rule ID

SV-243232r856611_rule

STIG

Network WLAN Bridge Platform Security Technical Implementation Guide

Version

V7R2

CCIs

CCI-002403

Discussion

Call-home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack. (See SRG-NET-000131-RTR-000083.)

Check Content

Review the device configuration to determine if the call home service or feature is disabled on the device. 

If the call home service is enabled on the device, this is a finding.

Note: This feature can be enabled if the communication is only to a server residing in the local area network or enclave.

Fix Text

Configure the network device to disable the call home service or feature.

Note: This feature can be enabled if the communication is only to a server residing in the local area network or enclave.