STIGUI
V-260919CAT II — Medium severitySV-260919r966114_rule

MSR telemetry must be disabled.

Rule version CNTR-MK-000510 · STIG v2 · 2024-08-27

Discussion

MSR provides a telemetry service that automatically records and transmits data to Mirantis through an encrypted channel for monitoring and analysis purposes. While this channel is secure, it introduces an attack vector and must be disabled.

Check

If MSR is not being utilized, this is Not Applicable.

Verify that usage and API analytics tracking is disabled in MSR.

Log in to the MSR web UI and navigate to System >> General Tab. Scroll to the "Analytics" section.

If the "Send data" option is enabled, this is a finding.

Fix

If MSR is not being utilized, this is Not Applicable.

Disable usage and API analytics tracking in MSR.

Log in to the MSR web UI and navigate to System >> General Tab. Scroll to the "Analytics" section.

Click the "Send data" slider to disable this capability.

Identifiers

Group ID
V-260919
Group title
SRG-APP-000141-CTR-000315
Rule ID
SV-260919r966114_rule
Check ID
C-64648r966112_chk
Fix ID
F-64556r966113_fix