TMA-MFD-2.1.1
Set a Static IP Addresses
Description
Network devices commonly support two distinct methods for obtaining an IP address; statically and dynamically. Statically assigned IP addresses are typically stored within the device’s NVRAM. Dynamically assigned IP addresses are typically obtained at device boot- time via one of many network-based broadcast mechanisms. It is recommended that a static IP address be assigned to the MFD. The use of static IP addresses reduces the device’s exposure to attacks against broadcast IP configuration mechanisms, such as DHCP and BOOTP. Additionally, static IP addresses may increase an organization’s ability to effectively monitor and protect the device from network-born threats as the device’s IP address will remain constant in Intrusion Detection System (IDS) logs and firewall policies.
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.1: Set a Static IP Addresses.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.1 to configure: Set a Static IP Addresses.
Properties
- Operating systems
- Any
- Tags
- mfdprinter
- Reference
- CIS Multi-Function Device Benchmark v1.0.0 - 2.1.1 Set a Static IP Addresses