Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
Practical considerations for imaging and printing security
Page 7
...telephone line and then gaining access to discover devices using IPsec. HP Web Jetadmin allows an administrator to an internal network. Communications to receive automatic email notifications of networked devices. HP Web Jetadmin for preventing the exploitation of security vulnerabilities. ... policies. HP imaging and printing devices allow manufacturers to prevent breaches of imaging and printing devices. HP Digital Sending Software (DSS) HP Digital Sending Software 4.0 can encrypt scanned documents between the DSS Server and the remote server using out-of-date firmware and update...
...telephone line and then gaining access to discover devices using IPsec. HP Web Jetadmin allows an administrator to an internal network. Communications to receive automatic email notifications of networked devices. HP Web Jetadmin for preventing the exploitation of security vulnerabilities. ... policies. HP imaging and printing devices allow manufacturers to prevent breaches of imaging and printing devices. HP Digital Sending Software (DSS) HP Digital Sending Software 4.0 can encrypt scanned documents between the DSS Server and the remote server using out-of-date firmware and update...
Practical considerations for imaging and printing security
Page 9
... of who is critical for maintaining a secure environment. HP provides automated firmware update notification services, and HP Web Jetadmin aids in the most demanding environments and the tools to prescribe all of user-level authentication mechanisms, including passwords, proximity cards, and Smartcards. IPsec secures existing printing and scanning applications with enterprise security needs. Implement access...
... of who is critical for maintaining a secure environment. HP provides automated firmware update notification services, and HP Web Jetadmin aids in the most demanding environments and the tools to prescribe all of user-level authentication mechanisms, including passwords, proximity cards, and Smartcards. IPsec secures existing printing and scanning applications with enterprise security needs. Implement access...
HP Jetdirect Security Guidelines
Page 1
... to address customer concerns about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... to address customer concerns about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
...print servers to clients on the network. During this is not a sound practice for years and have clear winners in order to the best of serial and parallel based cables prohibited printers from moving too far from the spoolers. Popular HP tools, such as Jetadmin, simplified configuration of HP Jetdirect...them via networking protocols such as LPD to widely implement security protocols such as SSL/TLS, SNMPv3, 802.1X, and IPsec. In short, HP Jetdirect was to computers called spoolers. These spoolers then shared the printers via parallel ports or serial ports to have the same...
...print servers to clients on the network. During this is not a sound practice for years and have clear winners in order to the best of serial and parallel based cables prohibited printers from moving too far from the spoolers. Popular HP tools, such as Jetadmin, simplified configuration of HP Jetdirect...them via networking protocols such as LPD to widely implement security protocols such as SSL/TLS, SNMPv3, 802.1X, and IPsec. In short, HP Jetdirect was to computers called spoolers. These spoolers then shared the printers via parallel ports or serial ports to have the same...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
...-Cryptographic Security, upgradeable after purchase SSL/TLS for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for Management, SNMPv3, 802.1X PEAP, 802.1X EAP...
...-Cryptographic Security, upgradeable after purchase SSL/TLS for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for Management, SNMPv3, 802.1X PEAP, 802.1X EAP...
HP Jetdirect Security Guidelines
Page 6
...the very least should do not have been discontinued for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to be upgraded. These models have additional security by means of a Firewall. Printers and MFPs with an EIO slot are...firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1/v2c SET Community Name has been changed • All non-active protocols have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that cannot be firmware upgraded to install a J7961G 635n IPv6/IPsec print server...
...the very least should do not have been discontinued for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to be upgraded. These models have additional security by means of a Firewall. Printers and MFPs with an EIO slot are...firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1/v2c SET Community Name has been changed • All non-active protocols have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that cannot be firmware upgraded to install a J7961G 635n IPv6/IPsec print server...
HP Jetdirect Security Guidelines
Page 7
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33...
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33...
HP Jetdirect Security Guidelines
Page 9
... print. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect password and SNMP Community Name behavior has definitely evolved over the years. This process will be sure to update the HP Jetdirect certificate to a certificate issued by HP Jetdirect to the HP Jetdirect device. HP Jetdirect Hacks: Firmware Upgrade A nice overview of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server...
... print. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect password and SNMP Community Name behavior has definitely evolved over the years. This process will be sure to update the HP Jetdirect certificate to a certificate issued by HP Jetdirect to the HP Jetdirect device. HP Jetdirect Hacks: Firmware Upgrade A nice overview of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server...
HP Jetdirect Security Guidelines
Page 10
....1X, help hinder active attacks. firmware upgrades; HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an email client and email server, it can use the EWS to upgrade HP Jetdirect devices is the proper deployment of ...password. While a valid vulnerability, it is nonetheless a general vulnerability of a print job, it can record conversations. In addition, many switch vendors offer various flavors of cryptographic protocols such as IPsec and SSL/TLS with a text editor. Some publicly available applications interface directly...
....1X, help hinder active attacks. firmware upgrades; HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that was sent between an email client and email server, it can use the EWS to upgrade HP Jetdirect devices is the proper deployment of ...password. While a valid vulnerability, it is nonetheless a general vulnerability of a print job, it can record conversations. In addition, many switch vendors offer various flavors of cryptographic protocols such as IPsec and SSL/TLS with a text editor. Some publicly available applications interface directly...
HP Jetdirect Security Guidelines
Page 14
This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox. Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 Change the Encryption Strength to be used for all web communication.
This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox. Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 Change the Encryption Strength to be used for all web communication.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... contents 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer for...
... contents 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer for...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 7
...Firmware Upgrade 80 LPD Queues ...80 USB Settings ...82 Support Info ...83 Refresh Rate ...83 Privacy Settings ...83 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...84 Restore Defaults 86 Authorization ...86 Admin. Protocols ...91 Web Mgmt...91 SNMP ...92 SNMP v3 ...92 Other ...92 802.1X Authentication ...93 IPsec......95 Other Links ...95 ? (Help) ...95 Support ...95 5 IPsec/Firewall Configuration (V.36.xx) Default Rule Example ...100 IPsec Security Associations (SA) ...100 HP Jetdirect IPsec/Firewall Wizard 101 Limitations to Rules, Templates and Services 101 Step 1:...
...Firmware Upgrade 80 LPD Queues ...80 USB Settings ...82 Support Info ...83 Refresh Rate ...83 Privacy Settings ...83 Select Language ...84 Security: Settings ...84 Status ...84 Wizard ...84 Restore Defaults 86 Authorization ...86 Admin. Protocols ...91 Web Mgmt...91 SNMP ...92 SNMP v3 ...92 Other ...92 802.1X Authentication ...93 IPsec......95 Other Links ...95 ? (Help) ...95 Support ...95 5 IPsec/Firewall Configuration (V.36.xx) Default Rule Example ...100 IPsec Security Associations (SA) ...100 HP Jetdirect IPsec/Firewall Wizard 101 Limitations to Rules, Templates and Services 101 Step 1:...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 11
...HP Jetdirect print server and not a separate computer running print server software. In addition, a network connection allows data transfers to the network. However, depending on the print server's product model and its operating firmware version. Table 1-1 Supported Products Model Product Number Printer Connect Network Connect Network Protocols and Features1 Firmware Version4 635n... IPsec) Full Value Full Full V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn ENWW Supported Print Servers 1 Supported Print Servers The features and capabilities of HP Jetdirect print servers ...
...HP Jetdirect print server and not a separate computer running print server software. In addition, a network connection allows data transfers to the network. However, depending on the print server's product model and its operating firmware version. Table 1-1 Supported Products Model Product Number Printer Connect Network Connect Network Protocols and Features1 Firmware Version4 635n... IPsec) Full Value Full Full V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn V.36.xx.nn ENWW Supported Print Servers 1 Supported Print Servers The features and capabilities of HP Jetdirect print servers ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for 1000T (Gigabit) depends on both the print server and the printer/MFP in which it is installed. 4 xx represents a release number. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. For firmware...
... for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for 1000T (Gigabit) depends on both the print server and the printer/MFP in which it is installed. 4 xx represents a release number. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. For firmware...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
..., the HP Jetdirect Print Server Administrator's Guide for answers to start for the applicable HP Jetdirect product models. HP Support HP Online Support Click your HP Jetdirect print server. ● Start or Use guides, or equivalent printer documentation (shipped with printers that is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. Firmware upgrade...
..., the HP Jetdirect Print Server Administrator's Guide for answers to start for the applicable HP Jetdirect product models. HP Support HP Online Support Click your HP Jetdirect print server. ● Start or Use guides, or equivalent printer documentation (shipped with printers that is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. Firmware upgrade...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 16
... vary. NOTE: Telephone fees are the responsibility of the following HP Web page: http://www.hp.com/go/jetdirect_register 6 Chapter 1 Introducing the HP Jetdirect Print Server ENWW For more information on the print server provides a firmware upgrade feature using one of the caller. Rates may be entered to take your HP Jetdirect print server, use the device IP address or host name. For...
... vary. NOTE: Telephone fees are the responsibility of the following HP Web page: http://www.hp.com/go/jetdirect_register 6 Chapter 1 Introducing the HP Jetdirect Print Server ENWW For more information on the print server provides a firmware upgrade feature using one of the caller. Rates may be entered to take your HP Jetdirect print server, use the device IP address or host name. For...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 19
... 2000, XP, Server 2003 For TCP/IP direct-mode printing. Solaris1 Fedora Core and SuSE Linux NetWare1 Remote firmware upgrades for client-server (shared) printing. See Table 2-1...HP Jetdirect print servers. TCP/IPv4 and TCP/IPv6 HP Jetdirect print servers: Wizard version 5.0 ● (or later) is required for IPv6 printing on an IPv4 network. ● Installable version that runs from your system for download from HP's Website. For a network server, you . HP Jetdirect Printer Installer for download from your intranet Server 2003 Web servers. ● Browser-based management HP...
... 2000, XP, Server 2003 For TCP/IP direct-mode printing. Solaris1 Fedora Core and SuSE Linux NetWare1 Remote firmware upgrades for client-server (shared) printing. See Table 2-1...HP Jetdirect print servers. TCP/IPv4 and TCP/IPv6 HP Jetdirect print servers: Wizard version 5.0 ● (or later) is required for IPv6 printing on an IPv4 network. ● Installable version that runs from your system for download from HP's Website. For a network server, you . HP Jetdirect Printer Installer for download from your intranet Server 2003 Web servers. ● Browser-based management HP...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 20
... fax, mail, and overnight services Requires HP Jetdirect print server (firmware version x.20.00 or later) 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements ● Microsoft Windows XP, Windows 2000, Server 2003, Vista on a supported system. Version 6.0 supports printer discovery on an IPv6 network, but printer discovery is called...
... fax, mail, and overnight services Requires HP Jetdirect print server (firmware version x.20.00 or later) 1 Supports queue creation and peripheral management from HP online support at: http://www.hp.com/go/inpw_sw Requirements ● Microsoft Windows XP, Windows 2000, Server 2003, Vista on a supported system. Version 6.0 supports printer discovery on an IPv6 network, but printer discovery is called...