Network printers
TMA-MFD-2.1.3
Restrict Administrative Access to Specific IP Addresses
Description
Many MFDs can be configured to limit administrative access to only those connections that originate from a designated IP subnet. It is recommended that access to network accessible administrative interfaces be limited to designated subnets. Restricting access to the MFD’s administrative interface to only a specific set of IP addresses will decrease exposure to unauthorized access. If the device lacks this functionality, use an access control list (ACL) in a router, firewall or switch to restrict access.
How it is checked
Audit method: Manual review
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.3: Restrict Administrative Access to Specific IP Addresses.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.3 to configure: Restrict Administrative Access to Specific IP Addresses.
Properties
- Operating systems
- Any
- Tags
- access-controlmfdprinter
- Reference
- CIS Multi-Function Device Benchmark v1.0.0 - 2.1.3 Restrict Administrative Access to Specific IP Addresses