TMA-PRINTER-JOB-RETENTION
Ensure stored print jobs are PIN-protected and automatically deleted
Descrição
Retained/stored jobs, scan-to-box documents and fax mailboxes can be reprinted or downloaded by anyone at the device or on the EWS. Require PIN/secure release and delete jobs automatically after a short period.
Como é verificado
Método de auditoria: Revisão manual
Esta recomendação não pode ser verificada automaticamente. Uma varredura a lista com estas instruções quando você passa --include-manual.
In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Copy/Print > Job Storage (HP: Retrieve from Device Memory / Job Storage Settings; Xerox: Secure Print / Saved Jobs; Ricoh: Stored Documents / Locked Print): stored/private jobs require a PIN or authenticated pull-print release; 'Temporary job retention' / auto-delete of stored and secure jobs is set (e.g. 4 hours or less, held jobs deleted at power off); scan/fax mailboxes are password protected; job history on the EWS hides document names from non-admins.
Como é corrigido
Método de correção: Orientação ou patch de infraestrutura
EWS: enable secure (PIN) or authenticated pull print, set stored-job auto-delete to the shortest workable period, password-protect document boxes and fax mailboxes, and hide job names in job logs from non-administrators.
Propriedades
- Sistemas operacionais
- Qualquer
- Tags
- printerjob-retentionconfidentiality
- Referência
- CIS Multi-Function Device Benchmark v1.0.0 - Job storage and retention (verify section number for your release)