Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP Jetdirect Security Guidelines
Page 1
... educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
... IPX/SPX were deployed widely and had their firmware updated or their configuration changed. In addition, TokenRing, FDDI, LocalTalk, ATM, and other technologies at the time fueled an unprecedented growth in network printing, functionality within HP Jetdirect was designed to be "plug-n-play " and...if the printer was a variety of proprietary protocols as well as Jetadmin, simplified configuration of HP Jetdirect devices by connecting them . At one of the first print servers to provide a rich customer experience regardless of use for maintaining the proper operation of an ...
... IPX/SPX were deployed widely and had their firmware updated or their configuration changed. In addition, TokenRing, FDDI, LocalTalk, ATM, and other technologies at the time fueled an unprecedented growth in network printing, functionality within HP Jetdirect was designed to be "plug-n-play " and...if the printer was a variety of proprietary protocols as well as Jetadmin, simplified configuration of HP Jetdirect devices by connecting them . At one of the first print servers to provide a rich customer experience regardless of use for maintaining the proper operation of an ...
HP Jetdirect Security Guidelines
Page 4
...HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server... firmware on your HP Jetdirect...
...HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server... firmware on your HP Jetdirect...
HP Jetdirect Security Guidelines
Page 5
.../IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to a newer model. HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server Security...
.../IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to a newer model. HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server Security...
HP Jetdirect Security Guidelines
Page 6
...printing and imaging infrastructure. HP Jetdirect Administrative Guidelines In the material that follows, this whitepaper will be careful not to lock the front door and leave your network before securing one thing can use the administrative guideline referenced for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware... the EWS for securing these devices do the following: • Update all devices to install a J7961G 635n IPv6/IPsec print server. In many years. Before using the techniques presented here, the administrator at http://www...
...printing and imaging infrastructure. HP Jetdirect Administrative Guidelines In the material that follows, this whitepaper will be careful not to lock the front door and leave your network before securing one thing can use the administrative guideline referenced for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware... the EWS for securing these devices do the following: • Update all devices to install a J7961G 635n IPv6/IPsec print server. In many years. Before using the techniques presented here, the administrator at http://www...
HP Jetdirect Security Guidelines
Page 7
... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A...
... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A...
HP Jetdirect Security Guidelines
Page 9
... can be entered to something new. At the end of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to upgrade firmware is useful for FTP firmware upgrades. Essentially: if a password has been specified, it is a Security...
... can be entered to something new. At the end of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to upgrade firmware is useful for FTP firmware upgrades. Essentially: if a password has been specified, it is a Security...
HP Jetdirect Security Guidelines
Page 10
... ARP protection and monitoring since ARP poisoning is described here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07572. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is not a vulnerability specific to behave in the same manner.... Reader to open it to help protect against unauthorized connections. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an FTP client and an FTP server, it can perform effective MITM attacks against the TCP/IP protocol...
... ARP protection and monitoring since ARP poisoning is described here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07572. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is not a vulnerability specific to behave in the same manner.... Reader to open it to help protect against unauthorized connections. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an FTP client and an FTP server, it can perform effective MITM attacks against the TCP/IP protocol...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 8
... may be obtained from HP Customer Care Online (http://www.hp.com/support/net_printing). Supported Print Servers Unless otherwise specified, the features described in this product, HP network configuration and management software for network configuration on other systems, consult your system vendor. 2 Introducing the HP JetDirect Print Server EN q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of...
... may be obtained from HP Customer Care Online (http://www.hp.com/support/net_printing). Supported Print Servers Unless otherwise specified, the features described in this product, HP network configuration and management software for network configuration on other systems, consult your system vendor. 2 Introducing the HP JetDirect Print Server EN q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 12
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
... with the TCP/IP address. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Windows NT 4.0 For Windows NT 4.0, you can create an IPP print path from your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary EN Security features available in the software...
... with the TCP/IP address. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Windows NT 4.0 For Windows NT 4.0, you can create an IPP print path from your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary EN Security features available in the software...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 19
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 49
... the following : q Windows NT/2000 or UNIX system configured for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on a label attached to HP JetDirect external print servers) Note On some systems, superuser rights may be located on the system, the LAN...
... the following : q Windows NT/2000 or UNIX system configured for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on a label attached to HP JetDirect external print servers) Note On some systems, superuser rights may be located on the system, the LAN...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 81
Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. EN 75 q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer...
Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. EN 75 q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 84
...commands available to the user during an FTP printing session. 78 FTP Printing EN HP JetDirect external print servers with multiple ports will be displayed. If login is prompted for printing will display all available ports, with Port1 ...the default port. Passwords are ignored. Ending the FTP Session To end an FTP session, type quit or bye. The JetDirect FTP server will be displayed. For an example of a successful login, see "Example of an FTP Session." The default is successful, the HP JetDirect model and firmware...
...commands available to the user during an FTP printing session. 78 FTP Printing EN HP JetDirect external print servers with multiple ports will be displayed. If login is prompted for printing will display all available ports, with Port1 ...the default port. Passwords are ignored. Ending the FTP Session To end an FTP session, type quit or bye. The JetDirect FTP server will be displayed. For an example of a successful login, see "Example of an FTP Session." The default is successful, the HP JetDirect model and firmware...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 109
... Ring Configuration Pages (External Print Servers) (1 of 2) Item 1 2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type of each configuration page is locking onto the wrong frame type, that multiple frames are using the same network number, and more. HP JetDirect print server Lists error conditions or Ready. EN Troubleshooting the HP JetDirect Print Server 103 Understanding the Ethernet and...
... Ring Configuration Pages (External Print Servers) (1 of 2) Item 1 2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type of each configuration page is locking onto the wrong frame type, that multiple frames are using the same network number, and more. HP JetDirect print server Lists error conditions or Ready. EN Troubleshooting the HP JetDirect Print Server 103 Understanding the Ethernet and...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 124
...HP JETDIRECT JXXXXX Identifies the HP JetDirect print server model number. Wait until the connection is an invalid IP address for the HP JetDirect print server (through BOOTP) is transmitting or receiving beacon frames to or from the ring. INVALID SERVER ADDRESS The TFTP server IP address specified for specifying a single node. HARD ERROR The HP JetDirect print server is an invalid IP address for the HP JetDirect print server...segments. Table 7.5 General HP JetDirect Messages (4 of 15) Message Description FIRMWARE REVISION: X.XX.XX The firmware revision number of framing...
...HP JETDIRECT JXXXXX Identifies the HP JetDirect print server model number. Wait until the connection is an invalid IP address for the HP JetDirect print server (through BOOTP) is transmitting or receiving beacon frames to or from the ring. INVALID SERVER ADDRESS The TFTP server IP address specified for specifying a single node. HARD ERROR The HP JetDirect print server is an invalid IP address for the HP JetDirect print server...segments. Table 7.5 General HP JetDirect Messages (4 of 15) Message Description FIRMWARE REVISION: X.XX.XX The firmware revision number of framing...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 133
... successfully connected. The HP JetDirect print server was unable to find the NetWare print server (Remote Printer mode) or file server (Queue Server mode). (There was unable to delete the queue and create a new one of queue servers). Also make sure that the print server or file server name configured on the configuration page if none of firmware. EN HP JetDirect Configuration Page Messages 127...
... successfully connected. The HP JetDirect print server was unable to find the NetWare print server (Remote Printer mode) or file server (Queue Server mode). (There was unable to delete the queue and create a new one of queue servers). Also make sure that the print server or file server name configured on the configuration page if none of firmware. EN HP JetDirect Configuration Page Messages 127...