TMA-MFD-2.3.4
Secure SNMP Facilities
Deskripsi
SNMP is a network management protocol used for centralized monitoring and configuration of network-based devices. SNMP "traps" are sent to a management console whenever an event occurs that warrants it (e.g. an "out-of-paper" or "paper jam" condition). The most basic form of SNMP security is the community string, which functions similarly to a password. Many devices come with preconfigured SNMP community strings which pose a security risk if left at the widely known, default settings - "public" for read-only access and "private" for read-write access. If SNMP is NOT used for device management in your environment, then disable it. If SNMP is used to monitor and/or manage the device, the following recommendations provide increasing levels of protection to better secure SNMP: 1. If only monitoring is necessary, disable SNMP read-write access. 2. Change the default SNMP community strings....
Cara pemeriksaan
Metode audit: Tinjauan manual
Rekomendasi ini tidak dapat diperiksa secara otomatis. Pemindaian akan menampilkannya beserta petunjuk ini saat Anda memberikan opsi --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4: Secure SNMP Facilities.
Cara perbaikan
Metode perbaikan: Panduan atau patch infrastruktur
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4 to configure: Secure SNMP Facilities.
Properti
- Sistem operasi
- Apa saja
- Tag
- mfdprinter
- Referensi
- CIS Multi-Function Device Benchmark v1.0.0 - 2.3.4 Secure SNMP Facilities