Pitney Bowes SendPro HVF1 User Manual page 29

Can you identify suspicious activity affecting SendPro MailCenter?
l
What are the access controls in place to secure SendPro MailCenter?
l
How do you authenticate an individual? A service?
l
Are there audit trails in place?
l
Is data stored on the device?
l
What controls protect the data?
l
Does the SendPro MailCenter allow remote administration?
l
What OS does this device run?
SUSE Linux Sled 11.
What controls are in place to protect this device against network-based malware
(viruses/worms) threats?
Controls include:
White list of URL's.
l
HTTPS.
l
Anti Virus Software.
l
Only executes services needed to perform activities.
l
OS distribution has been optimized and locked down.
l
Does it have a firewall?
Yes.
Who controls the firewall rules?
Pre-configured and not modifiable.
How are the firewall rules configured?
Allow only the ports HTTP, HTTPS and DNS.
What is the security patch process?
SendPro MailCenter security patches are applied by emergency updates via Pitney Bowes only, and
on a regular schedule through Pitney Bowes services.
What anti-virus controls does SendPro MailCenter use?
ClamAv is installed on every system. AV signature updates regularly updated.
What is the software update process, and how often does this occur?
Pitney Bowes User Guide January 2023
Connectivity
29