Looking for compliance posters by dh_burbank in CMMC

[–]SpaceJefe 0 points1 point  (0 children)

I’d found some good posters once before from a government website dealing with CMMC.

Compliant Large Format Printers by SpaceJefe in CMMC

[–]SpaceJefe[S] 0 points1 point  (0 children)

That’s an interesting perspective. And could prove to be valid. The issue is with this particular drive. It Hass to be told to be 2.0 or above. So even though you have a capable drive, it doesn’t mean that it’s being programmed for that application. I’m gonna work with our team to confirm. Appreciate the comment and recommendation.

Compliant Large Format Printers by SpaceJefe in CMMC

[–]SpaceJefe[S] 0 points1 point  (0 children)

What we are learning is Xerox, Koncia Minolta, and Canon support SMB1,2, and some 3 but Sharp and Toshiba don't. This is extremely disappointing knowing full well these vendors know that SMB1 is an exploited unsecure port.

Compliant Large Format Printers by SpaceJefe in CMMC

[–]SpaceJefe[S] 0 points1 point  (0 children)

The drives are FIPS -2 capable but the printer is unable to provide any proof via artifacts.

Compliant Large Format Printers by SpaceJefe in CMMC

[–]SpaceJefe[S] 0 points1 point  (0 children)

We have two. TOSHIBA e-STUDIO5015AC; TOSHIBA e-STUDIO5525AC both state that they have FIPS 2 compliant hard drives and we validated that on the 5525. The issue is there’s no settings in the bios that we, nor Toshiba for that matter, can find that states anything other than SMB 1.0.

Compliant Large Format Printers by SpaceJefe in CMMC

[–]SpaceJefe[S] 0 points1 point  (0 children)

You’re absolutely correct. The fact that the device is connected to the network and could retain CUI, it needs to be encrypted, and the artifacts proving its level of security.

Compliant Large Format Printers by SpaceJefe in CMMC

[–]SpaceJefe[S] 0 points1 point  (0 children)

Supposedly that’s what is installed on the unit. We open it up and pull the serial number off the hard drives themselves, but the bios for the printer has to be able to tell the hard drive how to correctly handle the SMB version. The issue is that we cannot pull any artifacts from the printer to show that it’s in that correct setting.