STIGUI
V-254000CAT II — Medium severitySV-254000r844033_rule

The Juniper router must not be configured to have any feature enabled that calls home to the vendor.

Rule version JUEX-RT-000280 · STIG v2 · 2024-06-10

Discussion

Call home services will routinely send data such as configuration and diagnostic information to the vendor for routine or emergency analysis and troubleshooting. There is a risk that transmission of sensitive data sent to unauthorized persons could result in data loss or downtime due to an attack.

Check

Verify the call home service is disabled on the device.

Verify [edit system] does NOT contain a phone-home hierarchy as shown:

[edit system] host-name <hostname>; : <other system configuration> : phone-home { server https://<applicable URL>; rfc-compliant; }

If a call home service is enabled, this is a finding.

Fix

Configure the network device to disable the call home service or feature.

Delete the phone-home hierarchy under [edit system].

delete system phone-home Note: Because the command is hidden, Junos will not autocomplete and "phone-home" must be explicitly, and correctly, spelled out.

Identifiers

Group ID
V-254000
Group title
SRG-NET-000131-RTR-000083
Rule ID
SV-254000r844033_rule
Check ID
C-57452r844031_chk
Fix ID
F-57403r844032_fix