Print services for a MFD or printer are not restricted to Port 9100 and/or LPD (Port 515). Where both Windows and non-Windows clients need services from the same device, both Port 9100 and LPD can be enabled simultaneously.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-6790	MFD03.001	SV-7015r1_rule	DCBP-1	Low

Description
Printer services running on ports other than the known ports for printing cannot be monitored on the network and could lead to a denial of service it the invalid port is blocked by a network administrator responding to an alert from the IDS for traffic on an unauthorized port.

STIG	Date
Multifunction Device and Network Printers STIG	2019-10-07

Details

Check Text ( C-2994r1_chk )
The reviewer will, with the assistance of the SA, verify that the MFD or printer print services are restricted to LPD or port 9100. Where both Windows and non-Windows clients need services from the same device, both Port 9100 and LPD can be enabled simultaneously.

Fix Text (F-6456r1_fix)
Develop a plan to coordinate the reconfiguration of the printer servers and clients so that print services runs only on authorized ports. Obtain CM approval of the plan and implement the plan.