Multifunction Device and Network Printers STIG
Rules, Groups, and Values defined within the XCCDF Benchmark
-
The MFD or Network Printer must employ the most current firmware available.
MFD devices or printers utilizing old firmware can expose the network to known vulnerabilities leading to a denial of service or a compromise of sensitive data. While the MFD must use the most curr...Rule Medium Severity -
MFD SNMP Community Strings
Group -
The default passwords and SNMP community strings of all management services have not been replaced with complex passwords.
There are many known vulnerabilities in the SNMP protocol and if the default community strings and passwords are not modified an unauthorized individual could gain control of the MFD or printer. T...Rule High Severity -
MFD Configuration State After Power Down or Reboot
Group -
The MFD or Network Printer must maintain configuration state (e.g., passwords, service settings) after a power down or restart.
If the MFD does not maintain it state over a power down or restart, it will expose the network to all of the vulnerabilities that where mitigated by the modifications made to its configuration stat...Rule High Severity -
MFD Management Protocols
Group -
Management protocols, with the exception of HTTPS and SNMPv3, must be disabled at all times except when necessary.
Unneeded protocols expose the device and the network to unnecessary vulnerabilities.Rule Medium Severity -
MFD or a printer can be managed from any IP
Group -
Print Services Restricted to Port 9100 and/or LPD
Group -
MFD/Printer Restrict Jobs Only From Print Spooler
Group
Node 2
The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.