The Cisco ACI must not be configured to have any feature enabled that calls home to the vendor.
Overview
| Finding ID | Version | Rule ID | IA Controls | Severity |
| V-272076 | CACI-RT-000016 | SV-272076r1113982_rule | CCI-002403 | medium |
| Description | ||||
| Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack. | ||||
| STIG | Date | |||
| Cisco ACI Router Security Technical Implementation Guide | 2025-06-18 | |||
Details
Check Text (C-272076r1113982_chk)
Verify the Call Home feature is disabled:
1. Navigate to the "Admin" section in the GUI, then expand All >> Communication Management >> Call Home.
2. In the General tab, verify the Admin State is set to "Off".
If the Call Home feature is configured to send messages to unauthorized individuals such as Cisco TAC, this is a finding.
Fix Text (F-76033r1064193_fix)
Disable the Call Home feature:
1. Navigate to the "Admin" section in the GUI, then expand All >> Communication Management >> Call Home.
2. In the General tab, set the Admin State to "Off".
3. Click "Save".