The Cisco switch must not be configured to have any feature enabled that calls home to the vendor.
An XCCDF Rule
Description
<VulnDiscussion>Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.</VulnDiscussion><FalsePositives></FalsePositives><FalseNegatives></FalseNegatives><Documentable>false</Documentable><Mitigations></Mitigations><SeverityOverrideGuidance></SeverityOverrideGuidance><PotentialImpacts></PotentialImpacts><ThirdPartyTools></ThirdPartyTools><MitigationControl></MitigationControl><Responsibility></Responsibility><IAControls></IAControls>
- ID
- SV-221078r999687_rule
- Severity
- Medium
- References
- Updated
Remediation - Manual Procedure
Disable the call home feature as shown below:
SW1(config)# callhome
SW1(config-callhome)# no enable
SW1(config-callhome)# end