TMA-MFD-2.1.2
Set Static DNS Server Addresses
Descrição
The Domain Name System (DNS) is a naming system for networked computers, devices, and resources. It is typically leveraged by network participants to resolve names to and from IP addresses. Network devices commonly support the ability to obtain DNS server addresses via two distinct methods; statically and dynamically. Statically assigned DNS server addresses are typically stored within the device’s NVRAM. Dynamically assigned DNS addresses are typically obtained at device boot-time via one of many network-based broadcast mechanisms. It is recommended that DNS server IP addresses be statically configured in the MFD. The use of static DNS server addresses reduces the device’s exposure to attacks against broadcast IP configuration mechanisms, such as DHCP and BOOTP. DHCP and other broadcast mechanisms utilize a UDP transport, which is susceptible to spoofing. If a malicious entity is abl...
Como é verificado
Método de auditoria: Revisão manual
Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.2: Set Static DNS Server Addresses.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.2 to configure: Set Static DNS Server Addresses.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- mfdprinter
- Referência
- CIS Multi-Function Device Benchmark v1.0.0 - 2.1.2 Set Static DNS Server Addresses