Restrict Administrative Access to Specific IP Addresses

СреднийУровень 1Ручная проверкаprinter

Описание

Many MFDs can be configured to limit administrative access to only those connections that originate from a designated IP subnet. It is recommended that access to network accessible administrative interfaces be limited to designated subnets. Restricting access to the MFD’s administrative interface to only a specific set of IP addresses will decrease exposure to unauthorized access. If the device lacks this functionality, use an access control list (ACL) in a router, firewall or switch to restrict access.

Как проверяется

Метод проверки: Ручная проверка

Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.

Verify compliance with CIS Multi-Function Device Benchmark v1.0.0 section 2.1.3: Restrict Administrative Access to Specific IP Addresses.

Как исправляется

Метод исправления: Рекомендация или патч инфраструктуры

Follow the remediation procedure in CIS Multi-Function Device Benchmark v1.0.0 section 2.1.3 to configure: Restrict Administrative Access to Specific IP Addresses.

Свойства

Операционные системы: Любая
Теги: access-controlmfdprinter
Источник: CIS Multi-Function Device Benchmark v1.0.0 - 2.1.3 Restrict Administrative Access to Specific IP Addresses