Solved

Question about firewalls and faxing

Posted on 2012-03-15
5
725 Views
Last Modified: 2012-04-19
I have a client who requires PCI certification for their credit card processing.  After i checked things out for the company, I requested the Elavon (the certification entity) run a scan, expecting to pass.  But alas, a couple of vulnerabilities were noted, including having port 9100 open to the internet.  That port is open to printing services and leads to a local Kyrocera printer (KM-4050) which is not used for printing from outside, but is set up to send and receive faxes. The firewall is only set to allow printing over port 9100.  The firewall is a Sonicwall combo firewall/router/access point.

Quetion is, if the traffic coming to the printer from the internet is only coming in the way of fax transmissions, and no printing ever happens from the WAN, does that open the port to other exploits?

Thanks for your assist.

Mark
0
Comment
Question by:mlitin
  • 3
5 Comments
 
LVL 1

Accepted Solution

by:
vinay1285 earned 250 total points
ID: 37726554
As far as I know, if you can't filter the traffic by IP addresses it's better to open the port to any source. But then you would notice a high volume of traffic for such cases. In my network I filter on ports on the router but based on IPs on the firewall.

Thanks.
0
 
LVL 2

Assisted Solution

by:wherami
wherami earned 250 total points
ID: 37727037
In theory I guess it could be exploited because you allow any in on port 9100 to the printer. If the application that is used to send and receive faxes can be exploited with a payload that say does a buffer overflow and gives access to the OS on the printer then they have arrived at your front door and are now inside so possible I would say yes. Depending on the business you may not be that valuable a target for the effort.
0
 

Author Comment

by:mlitin
ID: 37735182
Thanks for your responses, vinay1285 and wherami.

As a follow-up, if the printer is only being used from the outside world to send and receive faxes, and all other use is internal,  is the opening of any port for those purposes necessary?


Thanks again.

Mark
0
 

Author Comment

by:mlitin
ID: 37744166
Hi All,

 I mean if the fax is connected to a digital phone line on the same network segment as a server, does a WAN->LAN port 9100 or any port need to be open to allow the transmission and receiving of faxes?

Thanks
0
 

Author Comment

by:mlitin
ID: 37768903
New info...  Talked with a previous tech with the company who said these ports were opened to eliminate problems printing from their web-based applications.  I wonder at the logic of this...  Do you  find this questionable?
0

Featured Post

What Should I Do With This Threat Intelligence?

Are you wondering if you actually need threat intelligence? The answer is yes. We explain the basics for creating useful threat intelligence.

Join & Write a Comment

Suggested Solutions

Malicious software is nothing new. Viruses have been created and spread since before physical networks became popular; back then viruses spread via floppy disk and modem connections with shared systems. Viruses weren't so rampant and protecting your…
Envision that you are chipping away at another e-business site with a team of pundit developers and designers. Everything seems, by all accounts, to be going easily.
In this tutorial you'll learn about bandwidth monitoring with flows and packet sniffing with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're interested in additional methods for monitoring bandwidt…
This demo shows you how to set up the containerized NetScaler CPX with NetScaler Management and Analytics System in a non-routable Mesos/Marathon environment for use with Micro-Services applications.

707 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

18 Experts available now in Live!

Get 1:1 Help Now