TMA-MFD-2.3.4
Secure SNMP Facilities
Descripción
SNMP is a network management protocol used for centralized monitoring and configuration of network-based devices. SNMP "traps" are sent to a management console whenever an event occurs that warrants it (e.g. an "out-of-paper" or "paper jam" condition). The most basic form of SNMP security is the community string, which functions similarly to a password. Many devices come with preconfigured SNMP community strings which pose a security risk if left at the widely known, default settings - "public" for read-only access and "private" for read-write access. If SNMP is NOT used for device management in your environment, then disable it. If SNMP is used to monitor and/or manage the device, the following recommendations provide increasing levels of protection to better secure SNMP: 1. If only monitoring is necessary, disable SNMP read-write access. 2. Change the default SNMP community strings....
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4: Secure SNMP Facilities.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4 to configure: Secure SNMP Facilities.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- mfdprinter
- Referencia
- CIS Multi-Function Device Benchmark v1.0.0 - 2.3.4 Secure SNMP Facilities