AOS, when configured as a WLAN bridge, must not be configured to have any feature enabled that calls home to the vendor.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-266705	ARBA-NT-001610	SV-266705r1040645_rule	CCI-002403	medium
Description
Call-home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack. (Refer to SRG-NET-000131-RTR-000083.)
STIG			Date
HPE Aruba Networking AOS Wireless Security Technical Implementation Guide			2024-10-29

Related Frameworks

1 mapping across 3 frameworks

SCF0 mappings

No source states a mapping between these directly.

Also reachable in 3 hops (2) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

NET-03Boundary Protection

0.50

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2intersects

NET-04.1Deny Traffic by Default & Allow Traffic by Exception

0.50

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)
SCF Secure Traceability Relationship Mapping (STRM)2026.2intersects

NIST 800-530 mappings

No source states a mapping between these directly.

Also reachable in 2 hops (8) derived by us, not asserted by any source

Each of these is a route we composed by chaining published mappings. No publisher states a relationship between the two endpoints.

CM-6Configuration Settings

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)3our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)3intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-24Fail in Known State

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-47Alternate Communications Paths

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-5Denial-of-service Protection

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)V2R1our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V2R1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-7Boundary Protection

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-7(11)Restrict Incoming Communications Traffic

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-7(29)Separate Subnets to Isolate Functions

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)V3R4our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V3R4intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

SC-7(5)Deny by Default — Allow by Exception

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)
DISA STIG Benchmark (XCCDF)V1R2our copyintersects(normalised)
DISA STIG Benchmark (XCCDF)V1R2intersects(normalised)
DISA CCI List2025-01-23equal to(normalised)

CCI1 mapping

CCI-002403

1.00

DISA STIG Benchmark (XCCDF)1intersects(normalised)

Details

Check Text (C-266705r1040645_chk)

Verify the AOS configuration using the web interface: 1. Navigate to Configuration >> System >> More tab. 2. Expand "Phone Home ". If "Phone Home" is enabled, this is a finding.

Fix Text (F-70532r1040645_fix)

Configure AOS using the web interface: 1. Navigate to Configuration >> System >> More tab. 2. Expand "Phone Home". 3. Click the toggle button to disable "Phone Home". 4. Click Submit >> Pending Changes >> Deploy Changes.