TMA-MFD-2.3.4
Secure SNMP Facilities
Description
SNMP is a network management protocol used for centralized monitoring and configuration of network-based devices. SNMP "traps" are sent to a management console whenever an event occurs that warrants it (e.g. an "out-of-paper" or "paper jam" condition). The most basic form of SNMP security is the community string, which functions similarly to a password. Many devices come with preconfigured SNMP community strings which pose a security risk if left at the widely known, default settings - "public" for read-only access and "private" for read-write access. If SNMP is NOT used for device management in your environment, then disable it. If SNMP is used to monitor and/or manage the device, the following recommendations provide increasing levels of protection to better secure SNMP: 1. If only monitoring is necessary, disable SNMP read-write access. 2. Change the default SNMP community strings....
How it is checked
Audit method: Manual review
This recommendation cannot be checked automatically. A scan lists it with these instructions when you pass --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4: Secure SNMP Facilities.
How it is fixed
Fix method: Guidance or infrastructure patch
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4 to configure: Secure SNMP Facilities.
Properties
- Operating systems
- Any
- Tags
- mfdprinter
- Reference
- CIS Multi-Function Device Benchmark v1.0.0 - 2.3.4 Secure SNMP Facilities