TMA-MFD-2.3.4
Secure SNMP Facilities
설명
SNMP is a network management protocol used for centralized monitoring and configuration of network-based devices. SNMP "traps" are sent to a management console whenever an event occurs that warrants it (e.g. an "out-of-paper" or "paper jam" condition). The most basic form of SNMP security is the community string, which functions similarly to a password. Many devices come with preconfigured SNMP community strings which pose a security risk if left at the widely known, default settings - "public" for read-only access and "private" for read-write access. If SNMP is NOT used for device management in your environment, then disable it. If SNMP is used to monitor and/or manage the device, the following recommendations provide increasing levels of protection to better secure SNMP: 1. If only monitoring is necessary, disable SNMP read-write access. 2. Change the default SNMP community strings....
점검 방법
감사 방식: 수동 검토
이 권장 사항은 자동으로 점검할 수 없습니다. --include-manual 옵션을 전달하면 스캔 결과에 이 지침과 함께 표시됩니다.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4: Secure SNMP Facilities.
조치 방법
조치 방식: 가이드 또는 인프라 패치
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.3.4 to configure: Secure SNMP Facilities.
속성
- 운영 체제
- 모두
- 태그
- mfdprinter
- 참고 자료
- CIS Multi-Function Device Benchmark v1.0.0 - 2.3.4 Secure SNMP Facilities