TMA-MFD-2.3.4
Secure SNMP Facilities
説明
SNMP is a network management protocol used for centralized monitoring and configuration of network-based devices. SNMP "traps" are sent to a management console whenever an event occurs that warrants it (e.g. an "out-of-paper" or "paper jam" condition). The most basic form of SNMP security is the community string, which functions similarly to a password. Many devices come with preconfigured SNMP community strings which pose a security risk if left at the widely known, default settings - "public" for read-only access and "private" for read-write access. If SNMP is NOT used for device management in your environment, then disable it. If SNMP is used to monitor and/or manage the device, the following recommendations provide increasing levels of protection to better secure SNMP: 1. If only monitoring is necessary, disable SNMP read-write access. 2. Change the default SNMP community strings....
チェック方法
監査方法: 手動レビュー
この推奨事項は自動ではチェックできません。--include-manual を指定すると、スキャン結果にこの手順付きで一覧表示されます。
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4: Secure SNMP Facilities.
修正方法
修正方法: ガイダンスまたは IaC パッチ
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4 to configure: Secure SNMP Facilities.
プロパティ
- オペレーティングシステム
- すべて
- タグ
- mfdprinter
- 参照
- CIS Multi-Function Device Benchmark v1.0.0 - 2.3.4 Secure SNMP Facilities