← Back to Multifunction Device and Network Printers Security Technical Implemetation Guide

V-6790

CAT III (Low)

Print services for a MFD or printer are not restricted to Port 9100 and/or LPD (Port 515). Where both Windows and non-Windows clients need services from the same device, both Port 9100 and LPD can be enabled simultaneously.

Rule ID

SV-7015r1_rule

STIG

Multifunction Device and Network Printers Security Technical Implemetation Guide

Version

V2R15

CCIs

None

Discussion

Printer services running on ports other than the known ports for printing cannot be monitored on the network and could lead to a denial of service it the invalid port is blocked by a network administrator responding to an alert from the IDS for traffic on an unauthorized port.

Check Content

The reviewer will, with the assistance of the SA, verify that the MFD or printer print services are restricted to LPD or port 9100.<br /><br />Where both Windows and non-Windows clients need services from the same device, both Port 9100 and LPD can be enabled simultaneously.<br />

Fix Text

Develop a plan to coordinate the reconfiguration of the printer servers and clients so that print services runs only on authorized ports.  Obtain CM approval of the plan and implement the plan.