TMA-MFD-2.1.2
Set Static DNS Server Addresses
Описание
The Domain Name System (DNS) is a naming system for networked computers, devices, and resources. It is typically leveraged by network participants to resolve names to and from IP addresses. Network devices commonly support the ability to obtain DNS server addresses via two distinct methods; statically and dynamically. Statically assigned DNS server addresses are typically stored within the device’s NVRAM. Dynamically assigned DNS addresses are typically obtained at device boot-time via one of many network-based broadcast mechanisms. It is recommended that DNS server IP addresses be statically configured in the MFD. The use of static DNS server addresses reduces the device’s exposure to attacks against broadcast IP configuration mechanisms, such as DHCP and BOOTP. DHCP and other broadcast mechanisms utilize a UDP transport, which is susceptible to spoofing. If a malicious entity is abl...
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.2: Set Static DNS Server Addresses.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.2 to configure: Set Static DNS Server Addresses.
Свойства
- Операционные системы
- Любая
- Теги
- mfdprinter
- Источник
- CIS Multi-Function Device Benchmark v1.0.0 - 2.1.2 Set Static DNS Server Addresses