TMA-PRINTER-JOB-RETENTION
Ensure stored print jobs are PIN-protected and automatically deleted
Описание
Retained/stored jobs, scan-to-box documents and fax mailboxes can be reprinted or downloaded by anyone at the device or on the EWS. Require PIN/secure release and delete jobs automatically after a short period.
Как проверяется
Метод проверки: Ручная проверка
Эту рекомендацию нельзя проверить автоматически. Сканирование выводит её вместе с этими инструкциями при указании флага --include-manual.
In the Embedded Web Server (EWS: browse to https://<printer-ip>/ and sign in as administrator; HP: Security / Networking tabs, Xerox: Properties > Security / Connectivity, Ricoh: Device Management > Configuration, Canon: Settings/Registration > Network Settings / Security Settings) > Copy/Print > Job Storage (HP: Retrieve from Device Memory / Job Storage Settings; Xerox: Secure Print / Saved Jobs; Ricoh: Stored Documents / Locked Print): stored/private jobs require a PIN or authenticated pull-print release; 'Temporary job retention' / auto-delete of stored and secure jobs is set (e.g. 4 hours or less, held jobs deleted at power off); scan/fax mailboxes are password protected; job history on the EWS hides document names from non-admins.
Как исправляется
Метод исправления: Рекомендация или патч инфраструктуры
EWS: enable secure (PIN) or authenticated pull print, set stored-job auto-delete to the shortest workable period, password-protect document boxes and fax mailboxes, and hide job names in job logs from non-administrators.
Свойства
- Операционные системы
- Любая
- Теги
- printerjob-retentionconfidentiality
- Источник
- CIS Multi-Function Device Benchmark v1.0.0 - Job storage and retention (verify section number for your release)