V-254000

Discussion

Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.

Check Content

Verify the call home service is disabled on the device.

Verify [edit system] does NOT contain a phone-home hierarchy as shown:

[edit system]
host-name <hostname>;
:
<other system configuration>
:
phone-home {
    server https://<applicable URL>;
    rfc-compliant;
}

If a call home service is enabled, this is a finding.