IT Baseline Protection Manual - The Information Warfare Site

Telecommunications Fax Servers
_________________________________________________________________________________________
8.5 Fax server
Description
This chapter deals with information transfer via facsimile
(fax). When selecting safeguards in the area of IT baseline
protection, it should be borne in mind that no distinction has
been made between different transmission standards (e.g.
CCITT Group 3). This module only considers fax traffic
generated using a fax server. A fax server in this sense is an
application which is installed on an IT system and provides
services on a network enabling other IT systems to send and/or receive faxes.
Fax servers are usually integrated into existing E Mail systems. Thus, it is possible for incoming fax
documents to be delivered to users by E Mail. Outgoing documents are passed to the fax server either
via a printer queue or else by E Mail. If the fax server is integrated into an E Mail system it is also
possible to send out "serial letters" either by fax or by E Mail. If the recipient has access to E Mail
then he receives the message free of charge by E Mail, otherwise it comes by fax. The document sent
or received by a fax server is a graphics file which cannot be directly edited in a word processing
system. However, archiving is possible in either case. This can be done either through the fax server
software or else in document management systems.
Fax server applications are available for a number of operating systems, e.g. for various UNIX
derivatives, Microsoft Windows NT and Novell NetWare. The threats and safeguards associated
directly with whichever operating system is used are not considered in this module. Those aspects are
considered in Section 6.1 and the section that is specific to the particular operating system.
Fax servers also often have a binary transfer mode capability. This enables any data which is not in fax
format to be transmitted. These transmissions do not constitute fax transmissions. Therefore any
special threats and safeguards relating to this service are not considered in this section. If the binary
transfer mode is permitted, then Section 7.2 Modems should also be used.
Threat Scenario
The following typical threats are assumed for fax information transfer over a fax server as part of IT
baseline protection:
_________________________________________________________________________________________
IT-Baseline Protection Manual: Otober 2000
Faxserver