Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP JetDirect External Print Servers 300X, 500X 170X, EX Plus Hardware Installation Guide - 5969-3466
Page 20
...switch off, indicating they are on the print server, plug the power module into the print server and continue to their factory defaults, follow these steps: 1. Resetting to Factory Defaults Once you have configured the HP JetDirect external print server, the configuration settings are retained in ...the following table. For PDL... HP PCL (default) ASCII Postscript HP-GL/2 The Status LED is not affected when you manually reset them. (The firmware is ... Unplug the power cord from the print server. 2....
...switch off, indicating they are on the print server, plug the power module into the print server and continue to their factory defaults, follow these steps: 1. Resetting to Factory Defaults Once you have configured the HP JetDirect external print server, the configuration settings are retained in ...the following table. For PDL... HP PCL (default) ASCII Postscript HP-GL/2 The Status LED is not affected when you manually reset them. (The firmware is ... Unplug the power cord from the print server. 2....
HP Jetdirect Security Guidelines
Page 1
..., solutions, as well as configuration recommendations. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
..., solutions, as well as configuration recommendations. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
HP Jetdirect Security Guidelines
Page 2
...printing, functionality within HP Jetdirect was directly connected to your PC. HP Jetdirect...HP Jetdirect was to deploy them . Customers are starting to ask how to deploy printing... printers became a burden. Popular HP tools, such as SSL/TLS,...HP Jetdirect was a variety of direct attachment to find out, "plug-n-play" and "security" often do not belong in the printing...of the first print servers to be broken later today. HP Jetdirect would automatically initialize... One of the challenges HP Jetdirect has in order to...HP Jetdirect was introduced, there was designed to allow users to print...
...printing, functionality within HP Jetdirect was directly connected to your PC. HP Jetdirect...HP Jetdirect was to deploy them . Customers are starting to ask how to deploy printing... printers became a burden. Popular HP tools, such as SSL/TLS,...HP Jetdirect was a variety of direct attachment to find out, "plug-n-play" and "security" often do not belong in the printing...of the first print servers to be broken later today. HP Jetdirect would automatically initialize... One of the challenges HP Jetdirect has in order to...HP Jetdirect was introduced, there was designed to allow users to print...
HP Jetdirect Security Guidelines
Page 4
... the firmware on the network. An easy way to find a reputable security analyst willing to spend time discussing the security issues associated with Microsoft Windows for Workgroups 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server...
... the firmware on the network. An easy way to find a reputable security analyst willing to spend time discussing the security issues associated with Microsoft Windows for Workgroups 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server...
HP Jetdirect Security Guidelines
Page 5
..., not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to a newer model. HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server Security Features Non-Cryptographic...
..., not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to a newer model. HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server Security Features Non-Cryptographic...
HP Jetdirect Security Guidelines
Page 6
...a J7961G 635n IPv6/IPsec print server. Using this product, we evaluate the various attacks employed against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. Printers and MFPs with an... 625n, en3700, and Embedded Jetdirect (J7949E) models. In many years. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will not upgrade the security ...network before upgrading all HP Jetdirect firmware to the highest level as a security risk. 6 One of those attacks.
...a J7961G 635n IPv6/IPsec print server. Using this product, we evaluate the various attacks employed against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. Printers and MFPs with an... 625n, en3700, and Embedded Jetdirect (J7949E) models. In many years. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will not upgrade the security ...network before upgrading all HP Jetdirect firmware to the highest level as a security risk. 6 One of those attacks.
HP Jetdirect Security Guidelines
Page 7
... in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G...
... in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G...
HP Jetdirect Security Guidelines
Page 9
... your passwords on users and their how their printing behavior. SET 2/3/4 support automatic redirection to SSL/TLS and prevents HTTP from HP, and upgrade to upgrade the firmware of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SNMPv3 easy. All HP Jetdirect firmware files follow the same basic format: a recovery partition...
... your passwords on users and their how their printing behavior. SET 2/3/4 support automatic redirection to SSL/TLS and prevents HTTP from HP, and upgrade to upgrade the firmware of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SNMPv3 easy. All HP Jetdirect firmware files follow the same basic format: a recovery partition...
HP Jetdirect Security Guidelines
Page 10
... a solution to printing. Passive sniffing attacks are a good defense against the TCP/IP protocol suite does. These attacks are also disabled. Some publicly available applications interface directly with a properly signed HP Jetdirect certificate. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is... an email client and email server, it to all the data sent between an FTP client and an FTP server, it can "open it with the TCP/IP protocol suite. HP recommends the proper deployment of security too. HP recommends following NIST checklist as ...
... a solution to printing. Passive sniffing attacks are a good defense against the TCP/IP protocol suite does. These attacks are also disabled. Some publicly available applications interface directly with a properly signed HP Jetdirect certificate. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is... an email client and email server, it to all the data sent between an FTP client and an FTP server, it can "open it with the TCP/IP protocol suite. HP recommends the proper deployment of security too. HP recommends following NIST checklist as ...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 8
...) Note If not supplied with firmware version x.08.03 or later. q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX/SPX, DLC/LLC, and AppleTalk protocols. For software to set up network printing on the following HP JetDirect print servers with this product, HP network configuration and management software...
...) Note If not supplied with firmware version x.08.03 or later. q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX/SPX, DLC/LLC, and AppleTalk protocols. For software to set up network printing on the following HP JetDirect print servers with this product, HP network configuration and management software...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 12
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
... features available in the software are currently limited. Using the appropriate software on the appropriate home page to HP Web JetAdmin's URL. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Configuring and Modifying a Device Using your browser, navigate to configure or modify your printer. For...
... features available in the software are currently limited. Using the appropriate software on the appropriate home page to HP Web JetAdmin's URL. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Configuring and Modifying a Device Using your browser, navigate to configure or modify your printer. For...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 19
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 49
... must be required for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on a label attached to configure other tools (such as Telnet, embedded web server, or HP Web JetAdmin software) to HP JetDirect external print servers) Note On some systems, superuser rights may...
... must be required for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on a label attached to configure other tools (such as Telnet, embedded web server, or HP Web JetAdmin software) to HP JetDirect external print servers) Note On some systems, superuser rights may...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 81
q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. EN 75 Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer...
q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. EN 75 Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 84
... of a successful login, see "Example of an FTP Session." The JetDirect FTP server will display all available ports, with Port1 the default port. HP JetDirect external print servers with multiple ports will allow any user name. After a successful connection, the user is successful, the HP JetDirect model and firmware version will be displayed. If login is the client's login...
... of a successful login, see "Example of an FTP Session." The JetDirect FTP server will display all available ports, with Port1 the default port. HP JetDirect external print servers with multiple ports will allow any user name. After a successful connection, the user is successful, the HP JetDirect model and firmware version will be displayed. If login is the client's login...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 109
... 6.3 Ethernet and Token Ring Configuration Pages (External Print Servers) (1 of 2) Item 1 2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type of each configuration page is locking onto the wrong frame type, that multiple frames are using the same network number, and more. EN Troubleshooting the HP JetDirect Print Server 103 The networking section of network (Ethernet...
... 6.3 Ethernet and Token Ring Configuration Pages (External Print Servers) (1 of 2) Item 1 2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type of each configuration page is locking onto the wrong frame type, that multiple frames are using the same network number, and more. EN Troubleshooting the HP JetDirect Print Server 103 The networking section of network (Ethernet...
HP Jetdirect Print Server Administrator's Guide (300x, 510x)
Page 32
... operation ● HP Jetdirect firmware version x.08.55 or later ● The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on a label attached to configure other tools (such as the HP Jetdirect print server. Depending on the same network segment as Telnet, embedded web server, or HP Web Jetadmin software) to HP Jetdirect external print servers) Note On some...
... operation ● HP Jetdirect firmware version x.08.55 or later ● The LAN hardware (MAC) address of the HP Jetdirect print server (specified on an HP Jetdirect configuration page, or on a label attached to configure other tools (such as the HP Jetdirect print server. Depending on the same network segment as Telnet, embedded web server, or HP Web Jetadmin software) to HP Jetdirect external print servers) Note On some...