Fax from the network is enabled but auditing of user access and fax log is not enabled.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6803	MFD07.004	SV-7028r1_rule	ECAR-1 ECAR-2 ECAR-3	Low

Description
Without auditing the originator and destination of a fax cannot be determined. Prosecuting of an individual who maliciously compromises sensitive data via a fax will be hindered without audits. The SA will ensure auditing of user access and fax log is enabled if fax from the network is enabled.

STIG	Date
Multifunction Device and Network Printers STIG	2015-04-02

Details

Check Text ( C-3018r1_chk )
The reviewer will, with the assistance of the SA, verify that auditing of user access and fax log is enabled if fax from the network is enabled.

Fix Text (F-6477r1_fix)
Configure the MFD to audit faxing in accordance with the SPAN STIG. If this is not possible, disable the fax functionality and disconnect the phone line from the MFD.