Finding ID | Version | Rule ID | IA Controls | Severity |
---|---|---|---|---|
V-6803 | MFD07.004 | SV-7028r1_rule | ECAR-1 ECAR-2 ECAR-3 | Low |
Description |
---|
Without auditing the originator and destination of a fax cannot be determined. Prosecuting of an individual who maliciously compromises sensitive data via a fax will be hindered without audits. The SA will ensure auditing of user access and fax log is enabled if fax from the network is enabled. |
STIG | Date |
---|---|
Multifunction Device and Network Printers STIG | 2015-04-02 |
Check Text ( C-3018r1_chk ) |
---|
The reviewer will, with the assistance of the SA, verify that auditing of user access and fax log is enabled if fax from the network is enabled. |
Fix Text (F-6477r1_fix) |
---|
Configure the MFD to audit faxing in accordance with the SPAN STIG. If this is not possible, disable the fax functionality and disconnect the phone line from the MFD. |