TMA-PRINTER-JOB-RETENTION
Ensure stored print jobs are PIN-protected and automatically deleted
Descripción
Retained/stored jobs, scan-to-box documents and fax mailboxes can be reprinted or downloaded by anyone at the device or on the EWS. Require PIN/secure release and delete jobs automatically after a short period.
Cómo se verifica
Método de auditoría: Revisión manual
Esta recomendación no se puede verificar automáticamente. Un escaneo la lista con estas instrucciones cuando se pasa --include-manual.
In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Copy/Print > Job Storage (HP: Retrieve from Device Memory / Job Storage Settings; Xerox: Secure Print / Saved Jobs; Ricoh: Stored Documents / Locked Print): stored/private jobs require a PIN or authenticated pull-print release; 'Temporary job retention' / auto-delete of stored and secure jobs is set (e.g. 4 hours or less, held jobs deleted at power off); scan/fax mailboxes are password protected; job history on the EWS hides document names from non-admins.
Cómo se corrige
Método de corrección: Guía o parche de infraestructura
EWS: enable secure (PIN) or authenticated pull print, set stored-job auto-delete to the shortest workable period, password-protect document boxes and fax mailboxes, and hide job names in job logs from non-administrators.
Propiedades
- Sistemas operativos
- Cualquiera
- Etiquetas
- printerjob-retentionconfidentiality
- Referencia
- CIS Multi-Function Device Benchmark v1.0.0 - Job storage and retention (verify section number for your release)