Skip to content
ATO Pathways
  Log In

I - Mission Critical Classified

Rules and Groups employed by this XCCDF Profile

  • MFD fax from network auditing

    <GroupDescription></GroupDescription>
    Group
    Show

  • Auditing of user access and fax logs must be enabled when fax from the network is enabled.

    &lt;VulnDiscussion&gt;Without auditing the originator and destination of a fax cannot be determined. Prosecuting of an individual who maliciously c...
    Rule Low Severity
    Show

  • MFD scan to SMTP (email)

    <GroupDescription></GroupDescription>
    Group
    Show

  • MFDs must not allow scan to SMTP (email).

    &lt;VulnDiscussion&gt;The SMTP engines found on the MFDs reviewed when writing the MFD STIG did not have robust enough security features supporting...
    Rule Medium Severity
    Show

  • MFD Hard Drive Lock

    <GroupDescription></GroupDescription>
    Group
    Show

  • A MFD device does not have a mechanism to lock and prevent access to the hard drive.

    &lt;VulnDiscussion&gt;If the hard disk drive of a MFD can be removed from the MFD the data on the drive can be recovered and read. This can lead t...
    Rule Medium Severity
    Show

  • MFD/Printer Global Configuration Settings

    <GroupDescription></GroupDescription>
    Group
    Show

  • The device is not configured to prevent non-printer administrators from altering the global configuration of the device.

    &lt;VulnDiscussion&gt;If unauthorized users can alter the global configuration of the MFD they can remove all security. This can lead to the compr...
    Rule High Severity
    Show

  • MFD03.002

    <GroupDescription></GroupDescription>
    Group
    Show

  • The MFD must be configured to prohibit the use of all unnecessary and/or nonsecure functions, physical and logical ports, protocols, and/or services.

    &lt;VulnDiscussion&gt;In order to prevent unauthorized connection of devices, unauthorized transfer of information, or unauthorized tunneling (i.e....
    Rule Medium Severity
    Show

Node 2

siemur/test-space

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules