Solved

Question about firewalls and faxing

Posted on 2012-03-15
5
730 Views
Last Modified: 2012-04-19
I have a client who requires PCI certification for their credit card processing.  After i checked things out for the company, I requested the Elavon (the certification entity) run a scan, expecting to pass.  But alas, a couple of vulnerabilities were noted, including having port 9100 open to the internet.  That port is open to printing services and leads to a local Kyrocera printer (KM-4050) which is not used for printing from outside, but is set up to send and receive faxes. The firewall is only set to allow printing over port 9100.  The firewall is a Sonicwall combo firewall/router/access point.

Quetion is, if the traffic coming to the printer from the internet is only coming in the way of fax transmissions, and no printing ever happens from the WAN, does that open the port to other exploits?

Thanks for your assist.

Mark
0
Comment
Question by:mlitin
  • 3
5 Comments
 
LVL 1

Accepted Solution

by:
vinay1285 earned 250 total points
ID: 37726554
As far as I know, if you can't filter the traffic by IP addresses it's better to open the port to any source. But then you would notice a high volume of traffic for such cases. In my network I filter on ports on the router but based on IPs on the firewall.

Thanks.
0
 
LVL 2

Assisted Solution

by:wherami
wherami earned 250 total points
ID: 37727037
In theory I guess it could be exploited because you allow any in on port 9100 to the printer. If the application that is used to send and receive faxes can be exploited with a payload that say does a buffer overflow and gives access to the OS on the printer then they have arrived at your front door and are now inside so possible I would say yes. Depending on the business you may not be that valuable a target for the effort.
0
 

Author Comment

by:mlitin
ID: 37735182
Thanks for your responses, vinay1285 and wherami.

As a follow-up, if the printer is only being used from the outside world to send and receive faxes, and all other use is internal,  is the opening of any port for those purposes necessary?


Thanks again.

Mark
0
 

Author Comment

by:mlitin
ID: 37744166
Hi All,

 I mean if the fax is connected to a digital phone line on the same network segment as a server, does a WAN->LAN port 9100 or any port need to be open to allow the transmission and receiving of faxes?

Thanks
0
 

Author Comment

by:mlitin
ID: 37768903
New info...  Talked with a previous tech with the company who said these ports were opened to eliminate problems printing from their web-based applications.  I wonder at the logic of this...  Do you  find this questionable?
0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
Transferring data across the virtual world became simpler but protecting it is becoming a real security challenge.  How to approach cyber security  in today's business world!
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…

830 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question