The MFD or Network Printer must maintain configuration state (e.g., passwords, service settings) after a power down or restart.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6782	MFD02.002	SV-7004r2_rule		High

Description
If the MFD does not maintain it state over a power down or restart, it will expose the network to all of the vulnerabilities that where mitigated by the modifications made to its configuration state. This also prevents accidental implementation of a “call-home” feature that is not allowed.

STIG	Date
Multifunction Device and Network Printers STIG	2019-10-07

Details

Check Text ( C-2968r2_chk )
The reviewer will verify the MFD or Network Printer maintains its configuration state after a power down or restart. Review the device documentation and/or confirm through demonstration to verify the MFD maintains configuration settings. If the MFD or Network Printer does not maintain its configuration state, this is a finding.

Fix Text (F-6435r2_fix)
If the MFD or Network Printer cannot be configured to maintain state, then replace the MFD with a MFD that will maintain its configuration state (passwords, service settings, etc) after a power down or restart.