Skip to content
ATO Pathways
  Log In

Multifunction Device and Network Printers STIG

Rules, Groups, and Values defined within the XCCDF Benchmark

  • MFD/Printer Security Policy

    <GroupDescription></GroupDescription>
    Group
    Show

  • Implementation of an MFD and printer security policy for the protection of classified information.

    &lt;VulnDiscussion&gt;Department of Defense Manual 5200.01, "Protection of Classified Information" provides policy, assigns responsibilities, and p...
    Rule Low Severity
    Show

  • MFD Level of Audit and Reviewing

    <GroupDescription></GroupDescription>
    Group
    Show

  • The level of audit has not been established or the audit logs being collected for the devices and print spoolers are not being reviewed.

    &lt;VulnDiscussion&gt;If inadequate information is captured in the audit, the identification and prosecution of malicious user will be very difficu...
    Rule Low Severity
    Show

  • MFD Classified Network

    <GroupDescription></GroupDescription>
    Group
    Show

  • MFDs with print, copy, scan, or fax capabilities must be prohibited on classified networks without the approval of the DAA.

    &lt;VulnDiscussion&gt;MFDs with print, copy, scan, or fax capabilities, if compromised, could lead to the compromise of classified data or the comp...
    Rule High Severity
    Show

  • MFD Clearing Disk Space Scan to Disk

    <GroupDescription></GroupDescription>
    Group
    Show

  • A MFD device, with scan to hard disk functionality used, is not configured to clear the hard disk between jobs.

    &lt;VulnDiscussion&gt;If the MFD is compromised the un-cleared, previously used, space on the hard disk drive can be read which can lead to a compr...
    Rule Medium Severity
    Show

  • MFD Scan Discretionary Access Control

    <GroupDescription></GroupDescription>
    Group
    Show

  • Scan to a file share is enabled but the file shares do not have the appropriate discretionary access control list in place.

    &lt;VulnDiscussion&gt;Without appropriate discretionary access controls unauthorized individuals may read the scanned data. This can lead to a com...
    Rule Low Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules