A firewall or router rule is not used to block all ingress and egress traffic from the enclave perimeter to the MFD or printer.

From Multifunction Device and Network Printers STIG

Part of MFD/Printer Firewall/Router Rule Perimeter

Associated with IA controls: DCBP-1

SV-7001r1_rule A firewall or router rule is not used to block all ingress and egress traffic from the enclave perimeter to the MFD or printer.

Vulnerability discussion

Access to the MFD or printer from outside the enclave network could lead to a denial of service caused by a large number of large print files being sent to the device. Ability for the MFD or printer to access addresses outside the enclave network could lead to a compromise of sensitive data caused by forwarding a print file to a location outside of the enclave network. This is good defence in depth practice.The SA will ensure there is a firewall or router rule to block all ingress and egress traffic from the enclave perimeter to the MFD or printer.

Check content

The reviewer will interview the SA to verify that there is a firewall or router rule to block all ingress and egress traffic from the enclave perimeter to the MFD or printer.

Fix text

Ensure that there is a firewall or router rule to block all ingress and egress traffic from the enclave perimeter to the MFD or printer.

Pro Tips

Lavender hyperlinks in small type off to the right (of CSS class id, if you view the page source) point to globally unique URIs for each document and item. Copy the link location and paste anywhere you need to talk unambiguously about these things.

You can obtain data about documents and items in other formats. Simply provide an HTTP header Accept: text/turtle or Accept: application/rdf+xml.