Details
Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.
Solution
Disable the call home feature as shown below.
R5(config)#no call-home
Supportive Information
The following resource is also helpful.
This security hardening control applies to the following category of controls within NIST 800-53: System and Communications Protection.This control applies to the following type of system Cisco.
References
- 800-53|SC-7(11)
- CAT|II
- CCI|CCI-002403
- Rule-ID|SV-216988r538977_rule
- STIG-ID|CISC-RT-000080
- STIG-Legacy|SV-105655
- STIG-Legacy|V-96517
- Vuln-ID|V-216988