Title

The Cisco ACI must not be configured to have any feature enabled that calls home to the vendor. (Cat II impact)

Discussion

Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.

Check Content

Verify the ACI configuration under Admin >> External Data Collectors >> monitoring Destinations >> smart callhome/callhome is not setup, and that no Intersight configuration is setup at System >> System Settings >> Intersight Connectivity. If the Call Home feature is configured to send messages to unauthorized individuals such as Cisco TAC, this is a finding.

Fix Text

Disable the Call Home feature: 1. Navigate to Admin >> External Data Collectors >> monitoring Destinations >> smart callhome. 2. In the General tab, set the Admin State to "Off". 3. Click "Save".

Additional Identifiers

Rule ID: SV-272076r1168127_rule

Vulnerability ID: V-272076

Group Title: SRG-NET-000131-RTR-000083

Expert Comments

CCIs tied to check.

Controls tied to check. These are derived from the CCIs shown above.