TMA-MFD-1.1.2
Disable Firewire/1394 Connectors
Description
Firewire is a physical interface, or connection, commonly used to connect computers, peripherals, and other consumer products. These interfaces are often used by MFDs to provide users with the ability to print documents stored on portable hard drives. It is recommended that Firewire ports be disabled. Firewire allows a device to have direct memory access (DMA), allowing it to perform I/O without the use of CPU resources. A device connected through a Firewire connection has the potential to write to and read from arbitrary memory locations in the MFD, potentially resulting in reduced levels of data integrity and confidentiality.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 1.1.2: Disable Firewire/1394 Connectors.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 1.1.2 to configure: Disable Firewire/1394 Connectors.
Properties
- Operating systems
- Any
- Tags
- mfdprinter
- Reference
- CIS Multi-Function Device Benchmark v1.0.0 - 1.1.2 Disable Firewire/1394 Connectors