Practical considerations for imaging and printing security
Page 6
... for small networks lacking sophisticated IT administration. Network connectivity with virus protection software, are unable to authenticate to extend an imaging and printing device's functionality. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that only IT deployed and trusted devices, such as...
... for small networks lacking sophisticated IT administration. Network connectivity with virus protection software, are unable to authenticate to extend an imaging and printing device's functionality. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that only IT deployed and trusted devices, such as...
HP Jetdirect Security Guidelines
Page 5
...printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security,... not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to do so, HP can provide some popular HP Jetdirect devices that are shown. ...
...printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security,... not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to do so, HP can provide some popular HP Jetdirect devices that are shown. ...
HP Jetdirect Security Guidelines
Page 6
...MIO model with a new external parallel port print server like the HP LaserJet 4000 and give it the latest in networking protocol and security support. As a reminder, these devices do the following: • Update all devices to install a J7961G 635n IPv6/IPsec print server. In many years. Before using the ...8226; All non-active protocols have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. The EIO slot was introduced on the basis of those attacks. For companies with an EIO slot are still being ...
...MIO model with a new external parallel port print server like the HP LaserJet 4000 and give it the latest in networking protocol and security support. As a reminder, these devices do the following: • Update all devices to install a J7961G 635n IPv6/IPsec print server. In many years. Before using the ...8226; All non-active protocols have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. The EIO slot was introduced on the basis of those attacks. For companies with an EIO slot are still being ...
HP Jetdirect Security Guidelines
Page 7
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... the HP Jetdirect Print Server ENWW Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support. Supported Network Protocols The supported network protocols, and popular network printing environments that use only. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support...
... the HP Jetdirect Print Server ENWW Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support. Supported Network Protocols The supported network protocols, and popular network printing environments that use only. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... print server for the applicable HP Jetdirect product models. HP Support HP Online Support Click your HP Jetdirect print server-24 hours a day, 7 days a week. The HP Web site: http://www.hp.com/support/net_printing is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec...
... print server for the applicable HP Jetdirect product models. HP Support HP Online Support Click your HP Jetdirect print server-24 hours a day, 7 days a week. The HP Web site: http://www.hp.com/support/net_printing is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... to your printer documentation. Using this server. Moving to Another Network (IPv4) When moving an HP Jetdirect print server that the IP address does not conflict with addresses on page 61. If the current BOOTP server is not reachable, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is...
... to your printer documentation. Using this server. Moving to Another Network (IPv4) When moving an HP Jetdirect print server that the IP address does not conflict with addresses on page 61. If the current BOOTP server is not reachable, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... v3 agent and seamlessly create an SNMP v3 account on the print server. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Using IPv4 protocols, there are typically configured automatically on the print server. For supported browsers with SSL Supported HP Web Jetadmin Version HP Web Jetadmin is a browser-based, enterprise management tool for network...
... v3 agent and seamlessly create an SNMP v3 account on the print server. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Using IPv4 protocols, there are typically configured automatically on the print server. For supported browsers with SSL Supported HP Web Jetadmin Version HP Web Jetadmin is a browser-based, enterprise management tool for network...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
... Domain Name 3. Encrypted browser communications through HTTPS (secure HTTP) is required for identification. By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support are configured as the URL. For more information. The IP address configured on page 17 for the device... IP address for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to retrieve a valid IP address from the network will automatically assign itself either a...
... Domain Name 3. Encrypted browser communications through HTTPS (secure HTTP) is required for identification. By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support are configured as the URL. For more information. The IP address configured on page 17 for the device... IP address for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to retrieve a valid IP address from the network will automatically assign itself either a...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
... relatively independent of IP addresses that support IPsec may control IP traffic using both IPv4 and IPv6 networks. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. 5 IPsec/Firewall Configuration (V.36.xx) (Full-featured print servers only) IPsec/Firewall features provide network-layer security on the print server, you click Apply button. The Firewall...
... relatively independent of IP addresses that support IPsec may control IP traffic using both IPv4 and IPv6 networks. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. 5 IPsec/Firewall Configuration (V.36.xx) (Full-featured print servers only) IPsec/Firewall features provide network-layer security on the print server, you click Apply button. The Firewall...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
... be prompted to select or configure an IPsec template to be used for the print server. Do not process (discard) the specified IP traffic. ● Require traffic to be deleted and click Delete. ENWW HP Jetdirect IPsec/Firewall Wizard 105 The default selection is ...configured; Use this button to add the custom service to pass without IPsec protection.) ● Drop traffic. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● ...
... be prompted to select or configure an IPsec template to be used for the print server. Do not process (discard) the specified IP traffic. ● Require traffic to be deleted and click Delete. ENWW HP Jetdirect IPsec/Firewall Wizard 105 The default selection is ...configured; Use this button to add the custom service to pass without IPsec protection.) ● Drop traffic. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
...IP Addresses This section lists the IPv4 and IPv6 addresses configured on the IPsec rules is not configured. AH MAC Errors Displays the number of packets received for which an IPsec policy rule is displayed. No Rule Displays... the number of Authentication Header (AH) Message Authentication Code (MAC) errors. The template is in the following states: ● The template is configured to the most recent version. ● The template has been saved as a predefined template and available for your HP Jetdirect print server...
...IP Addresses This section lists the IPv4 and IPv6 addresses configured on the IPsec rules is not configured. AH MAC Errors Displays the number of packets received for which an IPsec policy rule is displayed. No Rule Displays... the number of Authentication Header (AH) Message Authentication Code (MAC) errors. The template is in the following states: ● The template is configured to the most recent version. ● The template has been saved as a predefined template and available for your HP Jetdirect print server...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
...print queues 157 Step 3. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec... Print a test file ...157 LPD on UNIX systems ...157 Configure print queues for BSD-based systems 157 Use SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003...
...print queues 157 Step 3. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec... Print a test file ...157 LPD on UNIX systems ...157 Configure print queues for BSD-based systems 157 Use SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
... transfer protocol (FTP) printing (Direct Mode printing) Microsoft Windows XP (32- HP Jetdirect print server support for HP support use only. To view the HP Jetdirect print server product number and installed firmware version, use those protocols. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. See Table 1-2 Supported network protocols on the system.) J7961G (635n) LPR/LPD RFC...
... transfer protocol (FTP) printing (Direct Mode printing) Microsoft Windows XP (32- HP Jetdirect print server support for HP support use only. To view the HP Jetdirect print server product number and installed firmware version, use those protocols. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. See Table 1-2 Supported network protocols on the system.) J7961G (635n) LPR/LPD RFC...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
...of both IPv4 and IPv6 networks. To configure the print server for network communications. ● WPA/WPA2-Personal Uses wi-fi protected access (WPA) standards through authentication and encryption protocols. 4 Chapter 1 Introducing the HP Jetdirect print server ENWW There are ...1X credentials to the print server client. IPsec, RFC 2401 provides additional protection through a pre-shared key. Authentication EAP/802.1X server-based authentication As a network client, HP Jetdirect full-featured print servers support network use with an authentication server, such as a...
...of both IPv4 and IPv6 networks. To configure the print server for network communications. ● WPA/WPA2-Personal Uses wi-fi protected access (WPA) standards through authentication and encryption protocols. 4 Chapter 1 Introducing the HP Jetdirect print server ENWW There are ...1X credentials to the print server client. IPsec, RFC 2401 provides additional protection through a pre-shared key. Authentication EAP/802.1X server-based authentication As a network client, HP Jetdirect full-featured print servers support network use with an authentication server, such as a...
HP Jetdirect Print Servers - Administrator's Guide
Page 68
... your printer documentation. Move to another network (IPv4) When moving an HP Jetdirect print server that is established. NOTE: If you use an HP Jetdirect wireless print server, this menu, you might need to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on the HP Jetdirect print server and printer. If the IP address was configured using the control...
... your printer documentation. Move to another network (IPv4) When moving an HP Jetdirect print server that is established. NOTE: If you use an HP Jetdirect wireless print server, this menu, you might need to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on the HP Jetdirect print server and printer. If the IP address was configured using the control...
HP Jetdirect Print Servers - Administrator's Guide
Page 111
...local addresses, ENWW HP Jetdirect IPsec/Firewall wizard 101 Figure 5-3 Use the IPsec Wizard to configure rules HP Jetdirect IPsec/Firewall Policy Use the IPsec/Firewall Wizard to the specified IP traffic. You are prompted to configure an IPsec template indicating the IPsec authentication/encryption settings ... traffic. One for all IPv4 addresses, and another for all IPv6 addresses. ● All non link local IPv6 Results in the following illustration. Depending on whether IPsec is not protected by the print server and device, the following actions are summarized in four (4) address...
...local addresses, ENWW HP Jetdirect IPsec/Firewall wizard 101 Figure 5-3 Use the IPsec Wizard to configure rules HP Jetdirect IPsec/Firewall Policy Use the IPsec/Firewall Wizard to the specified IP traffic. You are prompted to configure an IPsec template indicating the IPsec authentication/encryption settings ... traffic. One for all IPv4 addresses, and another for all IPv6 addresses. ● All non link local IPv6 Results in the following illustration. Depending on whether IPsec is not protected by the print server and device, the following actions are summarized in four (4) address...
HP Jetdirect Print Servers - Practical IPv6 Deployment for Printing and Imaging Devices
Page 1
... Subnets...27 IPv6 Discovery, Attacks, and Mitigations 28 HP Jetdirect Security Options with a server platform and fully supported IPv4, IPv6, and IPsec solutions. 1 There will be risky due to lack of IPv6 experience. Although the transition to IPv6 has been slow, there are many signs it is coming. The recent resolution of the American Registry for Printing and Imaging...
... Subnets...27 IPv6 Discovery, Attacks, and Mitigations 28 HP Jetdirect Security Options with a server platform and fully supported IPv4, IPv6, and IPsec solutions. 1 There will be risky due to lack of IPv6 experience. Although the transition to IPv6 has been slow, there are many signs it is coming. The recent resolution of the American Registry for Printing and Imaging...