← Back to Multifunction Device and Network Printers Security Technical Implemetation Guide

V-6783

CAT II (Medium)

Management protocols, with the exception of HTTPS and SNMPv3, must be disabled at all times except when necessary.

Rule ID

SV-7005r2_rule

STIG

Multifunction Device and Network Printers Security Technical Implemetation Guide

Version

V2R15

CCIs

None

Discussion

Unneeded protocols expose the device and the network to unnecessary vulnerabilities.

Check Content

Verify that all management protocols are disabled unless approved by the organization's AO/ISSM.<br /><br />Protocols may be enabled temporarily if needed to upgrade firmware or configure the device, but must be disabled immediately when this activity is completed. HTTPS and SNMPv3 may be used but must be configured in accordance with the requirements of the Network Infrastructure STIG.<br /><br />If management protocols other than HTTPS and SNMPv3 are enabled unnecessarily or without AO/ISSM approval, this is a finding.

Fix Text

Disable all management protocols except HTTPS and SNMPv3 unless approval has been granted by the organization's AO/ISSM.