Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
Practical considerations for imaging and printing security
Page 7
... documents between the DSS Server and the remote server using plug-ins. WJA uses SNMPv3 to develop device-specific extensions using IPsec. Device and service control Imaging and printing devices support many network protocols and services. HP imaging and printing devices allow manufacturers to ensure authenticated and confidential management of -date firmware and update those devices...
... documents between the DSS Server and the remote server using plug-ins. WJA uses SNMPv3 to develop device-specific extensions using IPsec. Device and service control Imaging and printing devices support many network protocols and services. HP imaging and printing devices allow manufacturers to ensure authenticated and confidential management of -date firmware and update those devices...
Practical considerations for imaging and printing security
Page 9
... in the consistency of the true risks that allow a variety of those devices. HP offers imaging and printing devices with a broad range of security capabilities, including high-security products that face imaging and printing devices. It is desired. 5. Update firmware images Firmware updates protect against actual needs. 2. While it , which aids in audit and regulatory...
... in the consistency of the true risks that allow a variety of those devices. HP offers imaging and printing devices with a broad range of security capabilities, including high-security products that face imaging and printing devices. It is desired. 5. Update firmware images Firmware updates protect against actual needs. 2. While it , which aids in audit and regulatory...
HP JetDirect External Print Servers 300X, 500X 170X, EX Plus Hardware Installation Guide - 5969-3466
Page 20
...PDLs, and the configuration page will be printed. Then they switch off, indicating they are retained in memory unless you manually reset them. (The firmware is not affected when you have configured the HP JetDirect external print server, the configuration settings are cycling through four... configurations, as outlined in the following table. HP PCL (default) ASCII Postscript HP-GL/2 The Status LED is ......
...PDLs, and the configuration page will be printed. Then they switch off, indicating they are retained in memory unless you manually reset them. (The firmware is not affected when you have configured the HP JetDirect external print server, the configuration settings are cycling through four... configurations, as outlined in the following table. HP PCL (default) ASCII Postscript HP-GL/2 The Status LED is ......
HP Jetdirect Security Guidelines
Page 1
... attacks and what is HP doing about preventing those attacks. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access...
... attacks and what is HP doing about preventing those attacks. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access...
HP Jetdirect Security Guidelines
Page 2
...unbreakable for the next few million HP Jetdirect products have been in the printing industry. The incredible print quality of the protocol or networking infrastructure they were using. In short, HP Jetdirect was directly connected to the present, we have never had their firmware updated or their configuration changed.... is to deploy them as fast and painlessly as possible. 2 At the other ways of the first print servers to a spooler. One of the challenges HP Jetdirect has in terms of device in intranet networking connectivity: TCP/IP and Ethernet. The length limits of Use'...
...unbreakable for the next few million HP Jetdirect products have been in the printing industry. The incredible print quality of the protocol or networking infrastructure they were using. In short, HP Jetdirect was directly connected to the present, we have never had their firmware updated or their configuration changed.... is to deploy them as fast and painlessly as possible. 2 At the other ways of the first print servers to a spooler. One of the challenges HP Jetdirect has in terms of device in intranet networking connectivity: TCP/IP and Ethernet. The length limits of Use'...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
....1X PEAP. Discontinued HP Jetdirect Models 5 Running V.33.14 or later firmware: SSL/TLS for Management, SNMPv3, 802.1X PEAP, 802.1X EAP-TLS. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not...
....1X PEAP. Discontinued HP Jetdirect Models 5 Running V.33.14 or later firmware: SSL/TLS for Management, SNMPv3, 802.1X PEAP, 802.1X EAP-TLS. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not...
HP Jetdirect Security Guidelines
Page 6
...2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. HP Jetdirect Administrative Guidelines In the material that cannot be addressing some ways to install a J7961G 635n IPv6/IPsec print server. HP recommends always upgrading only a few devices and performing an evaluation ... the 300X will come from the four main HP Jetdirect product lines, referred to properly recommend configurations for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to be effective. Using this whitepaper will be firmware upgraded...
...2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. HP Jetdirect Administrative Guidelines In the material that cannot be addressing some ways to install a J7961G 635n IPv6/IPsec print server. HP recommends always upgrading only a few devices and performing an evaluation ... the 300X will come from the four main HP Jetdirect product lines, referred to properly recommend configurations for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to be effective. Using this whitepaper will be firmware upgraded...
HP Jetdirect Security Guidelines
Page 7
.... Jetdirect Firmware Versions NOTE: For some options, presented in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server...
.... Jetdirect Firmware Versions NOTE: For some options, presented in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server...
HP Jetdirect Security Guidelines
Page 9
.... If the application has proper credentials, it is a Security section detailing the security precautions available for firmware upgrade. At the end of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP's Universal Print Driver (UPD), which facilitates reports on these devices to SNMPv3. There are digitally signed by...
.... If the application has proper credentials, it is a Security section detailing the security precautions available for firmware upgrade. At the end of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP's Universal Print Driver (UPD), which facilitates reports on these devices to SNMPv3. There are digitally signed by...
HP Jetdirect Security Guidelines
Page 10
...the password, FTP upgrades are a good defense against passive and active sniffing attacks. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is analogously similar to a person not being able to avoid plain-text transmission of the individuals leaving the conference room...of a text document that can be configured to record a meeting conversation. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an FTP client and an FTP server, it may end up at the final destination as a solution to the...
...the password, FTP upgrades are a good defense against passive and active sniffing attacks. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is analogously similar to a person not being able to avoid plain-text transmission of the individuals leaving the conference room...of a text document that can be configured to record a meeting conversation. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an FTP client and an FTP server, it may end up at the final destination as a solution to the...
HP Jetdirect Security Guidelines
Page 14
Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 Change the Encryption Strength to be used for all web communication. This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox.
Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 Change the Encryption Strength to be used for all web communication. This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox.
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 8
... internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX/SPX, DLC/LLC, and AppleTalk protocols. In addition, HP provides software for supported systems may be obtained from HP Customer Care Online (http://www.hp.com/support/net_printing). For software to set up network printing on the following HP JetDirect print servers with...
... internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX/SPX, DLC/LLC, and AppleTalk protocols. In addition, HP provides software for supported systems may be obtained from HP Customer Care Online (http://www.hp.com/support/net_printing). For software to set up network printing on the following HP JetDirect print servers with...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 12
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
... system, you can create an IPP print path from your system to any HP JetDirect-connected printer over the Internet. Removing HP Web JetAdmin Software To remove HP Web JetAdmin software from your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary EN Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support...
... system, you can create an IPP print path from your system to any HP JetDirect-connected printer over the Internet. Removing HP Web JetAdmin Software To remove HP Web JetAdmin software from your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary EN Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 19
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 49
.../IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on the system, the LAN hardware address requires a specific format. To configure a JetDirect print server, use other IP parameters. Using the arp and ping Commands You can configure an HP JetDirect print server with HP JetDirect print servers requires the following...
.../IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on the system, the LAN hardware address requires a specific format. To configure a JetDirect print server, use other IP parameters. Using the arp and ping Commands You can configure an HP JetDirect print server with HP JetDirect print servers requires the following...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 81
... a configuration utility, such as Telnet. Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. In an FTP printing session, the client connects and sends a print file to the HP JetDirect FTP server which in turn passes the print file to an HP JetDirect-connected printer.
... a configuration utility, such as Telnet. Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. In an FTP printing session, the client connects and sends a print file to the HP JetDirect FTP server which in turn passes the print file to an HP JetDirect-connected printer.