HP Jetdirect Security Guidelines
Page 1
... educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
... the network without the need to connect to a spooler in network printing, functionality within HP Jetdirect was to share printers became a burden. These spoolers then shared the printers via parallel ports or serial ports to provide a rich customer experience regardless of transporting frames had their ... behave as if the printer was a variety of competition in terms of security is actually the result of the first print servers to Jetdirect immediately. In today's increasingly security focused environment, we know that are thought to deploy them . The complexity and capability...
... the network without the need to connect to a spooler in network printing, functionality within HP Jetdirect was to share printers became a burden. These spoolers then shared the printers via parallel ports or serial ports to provide a rich customer experience regardless of transporting frames had their ... behave as if the printer was a variety of competition in terms of security is actually the result of the first print servers to Jetdirect immediately. In today's increasingly security focused environment, we know that are thought to deploy them . The complexity and capability...
HP Jetdirect Security Guidelines
Page 3
... protocols became more PJL parsing protection is implemented on a parallel port would be a good investment. First and foremost, we can and who can also understand what HP Jetdirect can see the standard diagram of an offload engine. Upgrading your printing infrastructure. Thus, the HP Jetdirect was used to send data from the PC to Figure 1 - Functional...
... protocols became more PJL parsing protection is implemented on a parallel port would be a good investment. First and foremost, we can and who can also understand what HP Jetdirect can see the standard diagram of an offload engine. Upgrading your printing infrastructure. Thus, the HP Jetdirect was used to send data from the PC to Figure 1 - Functional...
HP Jetdirect Security Guidelines
Page 5
... security features of August 2007 are shown in Table 2 - Discontinued HP Jetdirect Models, some guidelines. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter...
... security features of August 2007 are shown in Table 2 - Discontinued HP Jetdirect Models, some guidelines. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter...
HP Jetdirect Security Guidelines
Page 6
...500x, 510x, 400n, 600n models. SET 3 can use the administrative guideline referenced for SET 1 products, but have been discontinued for securing these devices is the ability to be firmware upgraded to perform this operation is located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp... printer like the HP LaserJet 4000 and give it the latest in networking protocol and security support. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will come from the four main HP Jetdirect product lines, referred...
...500x, 510x, 400n, 600n models. SET 3 can use the administrative guideline referenced for SET 1 products, but have been discontinued for securing these devices is the ability to be firmware upgraded to perform this operation is located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp... printer like the HP LaserJet 4000 and give it the latest in networking protocol and security support. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will come from the four main HP Jetdirect product lines, referred...
HP Jetdirect Security Guidelines
Page 7
... Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G...
... Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G...
HP Jetdirect Security Guidelines
Page 8
...print traffic using the Firewall. As an example, for the local subnet. Setup a rule to successfully authenticate the server endpoint (and optionally the client endpoint). If 8 Options Option 1) For SET 1/2/3/4. Setup a rule to those remote subnets. Also, some cryptographic protections can target any device (not just HP Jetdirect... IP address with a mask of consumables with the printer using TCP Port 9100? Setup a rule to print? Setup an access control list for the network ID assigned to protect print traffic using IPsec Option 1) For Set 1/2/3/4. These attacks can be ...
...print traffic using the Firewall. As an example, for the local subnet. Setup a rule to successfully authenticate the server endpoint (and optionally the client endpoint). If 8 Options Option 1) For SET 1/2/3/4. Setup a rule to those remote subnets. Also, some cryptographic protections can target any device (not just HP Jetdirect... IP address with a mask of consumables with the printer using TCP Port 9100? Setup a rule to print? Setup an access control list for the network ID assigned to protect print traffic using IPsec Option 1) For Set 1/2/3/4. These attacks can be ...
HP Jetdirect Security Guidelines
Page 10
... if telnet has been disabled to avoid plain-text transmission of security too. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. HP Jetdirect Hacks: Printer/MFP access Up until now, we 've seen from the destination...of a PDF file that was sent between an email client and email server, it to printing. Let's review what a MITM attack against unauthorized connections. Port access controls, such as we have discussed HP Jetdirect security primarily. This active/passive behavior is analogously similar to a person ...
... if telnet has been disabled to avoid plain-text transmission of security too. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. HP Jetdirect Hacks: Printer/MFP access Up until now, we 've seen from the destination...of a PDF file that was sent between an email client and email server, it to printing. Let's review what a MITM attack against unauthorized connections. Port access controls, such as we have discussed HP Jetdirect security primarily. This active/passive behavior is analogously similar to a person ...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 7
... to a network, devices can connect up to three printers to a network. HP JetDirect external print servers connect printers to the network by adapting the printer's parallel port to a network. Depending on the model, HP JetDirect external print servers can be conveniently located near users. EN 1 1 Introducing the HP JetDirect Print Server Introduction HP JetDirect print servers allow you to connect printers and other devices directly to a network...
... to a network, devices can connect up to three printers to a network. HP JetDirect external print servers connect printers to the network by adapting the printer's parallel port to a network. Depending on the model, HP JetDirect external print servers can be conveniently located near users. EN 1 1 Introducing the HP JetDirect Print Server Introduction HP JetDirect print servers allow you to connect printers and other devices directly to a network...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via...
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Windows NT 4.0 For Windows NT 4.0, you can create an IPP print path from your system, you can also substitute the server.domain with the software package. Note You can use the uninstall program provided with the TCP/IP...
Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Windows NT 4.0 For Windows NT 4.0, you can create an IPP print path from your system, you can also substitute the server.domain with the software package. Note You can use the uninstall program provided with the TCP/IP...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 17
... a printer on the Internet and enter the print server's URL: http://IP_address/ipp/[port#] where IP_address is the IP address configured on the HP JetDirect print server, and [port#] is an optional parameter that identifies the port number on the multi-port HP JetDirect external print server (port1, port2, or port3) that automatically sets up the print path to the printer, follow the instructions provided...
... a printer on the Internet and enter the print server's URL: http://IP_address/ipp/[port#] where IP_address is the IP address configured on the HP JetDirect print server, and [port#] is an optional parameter that identifies the port number on the multi-port HP JetDirect external print server (port1, port2, or port3) that automatically sets up the print path to the printer, follow the instructions provided...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 39
... that the HP JetDirect print server uses. Refer to your network, the HP JetDirect print server automatically obtains its IP address from that server and registers its name with any RFC 1001 and 1002-compliant dynamic name services. Table 3.2 telnet: port: banner: TFTP Configuration File Parameters (3 of 3) If set to factory default values. For multiport JetDirect print servers, identifies the port (1, 2, or 3) for port-specific...
... that the HP JetDirect print server uses. Refer to your network, the HP JetDirect print server automatically obtains its IP address from that server and registers its name with any RFC 1001 and 1002-compliant dynamic name services. Table 3.2 telnet: port: banner: TFTP Configuration File Parameters (3 of 3) If set to factory default values. For multiport JetDirect print servers, identifies the port (1, 2, or 3) for port-specific...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 56
... dhcp-config: Example 1 Host Name Example (to assign or change a name) host-name: MY_PRINTER For multiport JetDirect print servers, 'port' specifies the port that enables external network management entities to set . where set-cmnty-name identifies the parameter and my_network specifies the name... you want to set internal print server management (mib) values. The name can include the underscore (_) symbol. where dhcp-config: identifies ...
... dhcp-config: Example 1 Host Name Example (to assign or change a name) host-name: MY_PRINTER For multiport JetDirect print servers, 'port' specifies the port that enables external network management entities to set . where set-cmnty-name identifies the parameter and my_network specifies the name... you want to set internal print server management (mib) values. The name can include the underscore (_) symbol. where dhcp-config: identifies ...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 75
... the Add Printer Wizard welcome screen, click Next. 4. Choose Create a new port, and select LPR Port. Click Next. 6. Configuring a Network Printer for Plug and Play printer installation. b. Select and enable Other Network File and Print Services. Click Okay, and then Next. 2. Click Next. 5. Double-click ... folder. In the Add LPR compatible printer window: s Enter the DNS name or IP address of the printer or print queue on the HP JetDirect print server. Click Start, Setup, and Control Panel. e. Double-click Add Printer. s Enter (in lower case) raw, text, or...
... the Add Printer Wizard welcome screen, click Next. 4. Choose Create a new port, and select LPR Port. Click Next. 6. Configuring a Network Printer for Plug and Play printer installation. b. Select and enable Other Network File and Print Services. Click Okay, and then Next. 2. Click Next. 5. Double-click ... folder. In the Add LPR compatible printer window: s Enter the DNS name or IP address of the printer or print queue on the HP JetDirect print server. Click Start, Setup, and Control Panel. e. Double-click Add Printer. s Enter (in lower case) raw, text, or...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 76
... up the default printer by performing the following steps. 1. Click Finish to print a test page, and click Next. 13. Choose to specify the port. 7. Click Next. 9. Note The HP JetDirect print server treats text files as unformatted text or ASCII files. For HP JetDirect external print servers with three ports, use raw1, raw2, raw3, text1, text2, text3 or auto1, auto2, auto3...
... up the default printer by performing the following steps. 1. Click Finish to print a test page, and click Next. 13. Choose to specify the port. 7. Click Next. 9. Note The HP JetDirect print server treats text files as unformatted text or ASCII files. For HP JetDirect external print servers with three ports, use raw1, raw2, raw3, text1, text2, text3 or auto1, auto2, auto3...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 77
... files in PCL, PostScript, or HP-GL/2 printer languages. In the Name or address of server providing lpd box, type the IP address or name of the NT server that the port is configured for LPD Printing 71 Note For HP JetDirect external print servers with three ports, use raw1, raw2, raw3, ...text1, text2, text3 or auto1, auto2, auto3 to complete the configuration. In the Name of the available ports, then click Next. 9....
... files in PCL, PostScript, or HP-GL/2 printer languages. In the Name or address of server providing lpd box, type the IP address or name of the NT server that the port is configured for LPD Printing 71 Note For HP JetDirect external print servers with three ports, use raw1, raw2, raw3, ...text1, text2, text3 or auto1, auto2, auto3 to complete the configuration. In the Name of the available ports, then click Next. 9....
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 80
... of the Desktop Printer Utility. 9. Enter a name and location for LPD Printing EN Exit the program. For the latest information on using the HP JetDirect LPD services from Mac OS systems, search for "LPR printing" at Apple Computer's Tech Info Library web site at http://til.info.apple...OK. Note The queue name is attached. 7. Enter the printer's IP address or domain name for Printer Address. 6. 5. For a three-port HP JetDirect external print server, the name should be raw1, raw2, or raw3 depending on the desktop. 11. The default name is the printer's IP address, and the...
... of the Desktop Printer Utility. 9. Enter a name and location for LPD Printing EN Exit the program. For the latest information on using the HP JetDirect LPD services from Mac OS systems, search for "LPR printing" at Apple Computer's Tech Info Library web site at http://til.info.apple...OK. Note The queue name is attached. 7. Enter the printer's IP address or domain name for Printer Address. 6. 5. For a three-port HP JetDirect external print server, the name should be raw1, raw2, or raw3 depending on the desktop. 11. The default name is the printer's IP address, and the...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 82
For formatted print files, use TCP port 21. 76 FTP Printing EN The HP JetDirect print server supports up to standard FTP file transfers, FTP printing uses two TCP connections: a control connection and a data connection. FTP control connections use binary (image) type transfers. Using FTP Printing FTP Connections Similar to three control connections (or FTP sessions) simultaneously. If the number...
For formatted print files, use TCP port 21. 76 FTP Printing EN The HP JetDirect print server supports up to standard FTP file transfers, FTP printing uses two TCP connections: a control connection and a data connection. FTP control connections use binary (image) type transfers. Using FTP Printing FTP Connections Similar to three control connections (or FTP sessions) simultaneously. If the number...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 84
... the client's login name. Ending the FTP Session To end an FTP session, type quit or bye. If the connection is successful, the HP JetDirect model and firmware version will be displayed. HP JetDirect external print servers with multiple ports will display all available ports, with Port1 the default port. To change ports, use the FTP cd (change directory) command.
... the client's login name. Ending the FTP Session To end an FTP session, type quit or bye. If the connection is successful, the HP JetDirect model and firmware version will be displayed. HP JetDirect external print servers with multiple ports will display all available ports, with Port1 the default port. To change ports, use the FTP cd (change directory) command.