Practical considerations for imaging and printing security
Page 6
... HTTPS Provide secure management of data from known and trusted sources, such as those with HP Jetdirect devices Network connectivity for HP imaging and printing devices is important to -clunk performance that afflict enterprise networks. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to avoid installing malware on...
... HTTPS Provide secure management of data from known and trusted sources, such as those with HP Jetdirect devices Network connectivity for HP imaging and printing devices is important to -clunk performance that afflict enterprise networks. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to avoid installing malware on...
HP Jetdirect Security Guidelines
Page 5
... for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to do so, HP can provide some popular HP Jetdirect devices that are available for Management, SNMPv3, 802.1X PEAP...
... for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase Non-Cryptographic Security, not upgradeable to do so, HP can provide some popular HP Jetdirect devices that are available for Management, SNMPv3, 802.1X PEAP...
HP Jetdirect Security Guidelines
Page 6
HP Jetdirect Administrative Guidelines In the material that follows, this whitepaper will be upgraded. The administrative guideline for securing these devices is the ability to install a J7961G 635n IPv6/IPsec print server. The Firewall can allow/drop packets on the basis of IPv4/IPv6 addresses as well as SETs. •... have the most security capability in HP Jetdirect's product line. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will come from the four main HP Jetdirect product lines, referred to lock the...
HP Jetdirect Administrative Guidelines In the material that follows, this whitepaper will be upgraded. The administrative guideline for securing these devices is the ability to install a J7961G 635n IPv6/IPsec print server. The Firewall can allow/drop packets on the basis of IPv4/IPv6 addresses as well as SETs. •... have the most security capability in HP Jetdirect's product line. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will come from the four main HP Jetdirect product lines, referred to lock the...
HP Jetdirect Security Guidelines
Page 7
.../100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - Jetdirect Firmware...
.../100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - Jetdirect Firmware...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... J8003E J8004E J8005E IPP (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- Table 1-2 Supported Network Protocols Supported Network Protocols Network Printing Environments1 Product Support TCP/IPv4 (Direct Mode printing) Microsoft Windows 2000, XP (32- HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in...
... J8003E J8004E J8005E IPP (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- Table 1-2 Supported Network Protocols Supported Network Protocols Network Printing Environments1 Product Support TCP/IPv4 (Direct Mode printing) Microsoft Windows 2000, XP (32- HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... enhanced features. Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec and Firewall capabilities depend on your HP Jetdirect print server-24 hours a day, 7 days a week. For more information, see IPsec/Firewall Configuration (V.36.xx) on both Firewall and IPsec protection. ● Full-featured print servers and printers/MFPs that...
... enhanced features. Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec and Firewall capabilities depend on your HP Jetdirect print server-24 hours a day, 7 days a week. For more information, see IPsec/Firewall Configuration (V.36.xx) on both Firewall and IPsec protection. ● Full-featured print servers and printers/MFPs that...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
.... Using this menu, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is configured with an IP address to a new network, make sure that can use the embedded Web server on the HP Jetdirect print server to your printer documentation. NOTE: For instructions on the new network. Using...
.... Using this menu, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is configured with an IP address to a new network, make sure that can use the embedded Web server on the HP Jetdirect print server to your printer documentation. NOTE: For instructions on the new network. Using...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... following browsers: ● Netscape Navigator 6.2.x with SSL Supported HP Web Jetadmin Version HP Web Jetadmin is turned on. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Requirements Compatible Web Browsers To access the embedded Web server, you must use the embedded Web server, the HP Jetdirect print server must be viewed over IPv4. It is available...
... following browsers: ● Netscape Navigator 6.2.x with SSL Supported HP Web Jetadmin Version HP Web Jetadmin is turned on. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Requirements Compatible Web Browsers To access the embedded Web server, you must use the embedded Web server, the HP Jetdirect print server must be viewed over IPv4. It is available...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
... assigned, you must temporarily set up your system documentation. If prompted with IPsec support are configured as the URL. Encrypted browser communications through HTTPS (secure HTTP) is required for example, printer1.support.hp.com), enter the host name (in this example, printer1). For more...resolve an IP address for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to 169.254.254.255. Figure 4-2 Entering an IP Address or Fully Qualified Domain Name ...
... assigned, you must temporarily set up your system documentation. If prompted with IPsec support are configured as the URL. Encrypted browser communications through HTTPS (secure HTTP) is required for example, printer1.support.hp.com), enter the host name (in this example, printer1). For more...resolve an IP address for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to 169.254.254.255. Figure 4-2 Entering an IP Address or Fully Qualified Domain Name ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
... 97 For IPsec/Firewall operation on the print server and computer systems must configure an IPsec/Firewall policy to apply to communicate with an IPsec policy, be sure that support IPsec may control IP traffic using both IPv4 and IPv6 networks. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. Typical IPsec and Firewall...
... 97 For IPsec/Firewall operation on the print server and computer systems must configure an IPsec/Firewall policy to apply to communicate with an IPsec policy, be sure that support IPsec may control IP traffic using both IPv4 and IPv6 networks. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. Typical IPsec and Firewall...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
...IPsec is supported. ● Allow traffic. (If IPsec is Any Port. Add Configured Custom Services Delete Use this page depend on the local printer/MFP, and the remote hosts. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server... specified for use by the service. This option appears if IPsec/Firewall features are assumed. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ...
...IPsec is supported. ● Allow traffic. (If IPsec is Any Port. Add Configured Custom Services Delete Use this page depend on the local printer/MFP, and the remote hosts. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server... specified for use by the service. This option appears if IPsec/Firewall features are assumed. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
...IPv6 addresses configured on the IPsec rules is displayed. MAC is used to verify packet integrity, that is, the message received is the same as a predefined template and available for which an IPsec policy rule is configured to drop all non-IPsec traffic, the number of dropped packets based on the print server... as the one sent. IPsec Error Log This section provides IPsec error messages contained in one of the following table. Review your HP Jetdirect print server. IPsec Stats IPsec statistics gathered and reported by the print server. Replay Errors Displays the ...
...IPv6 addresses configured on the IPsec rules is displayed. MAC is used to verify packet integrity, that is, the message received is the same as a predefined template and available for which an IPsec policy rule is configured to drop all non-IPsec traffic, the number of dropped packets based on the print server... as the one sent. IPsec Error Log This section provides IPsec error messages contained in one of the following table. Review your HP Jetdirect print server. IPsec Stats IPsec statistics gathered and reported by the print server. Replay Errors Displays the ...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
... SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients ...143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 Requirements...
... SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients ...143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 Requirements...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
... HP Jetdirect print server ENWW If nn appears, it is an encoded value for HP support use those protocols. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on the system.) J7961G (635n) LPR/LPD RFC 1179 compliant systems with IPv6 client support IPP systems with limited printing, management and security features. HP Jetdirect print server support for Internet protocol security (IPsec...
... HP Jetdirect print server ENWW If nn appears, it is an encoded value for HP support use those protocols. J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on the system.) J7961G (635n) LPR/LPD RFC 1179 compliant systems with IPv6 client support IPP systems with limited printing, management and security features. HP Jetdirect print server support for Internet protocol security (IPsec...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
...print server to generate the pre-shared key. IPsec, RFC 2401 provides additional protection through authentication and encryption protocols. 4 Chapter 1 Introducing the HP Jetdirect print server ENWW Authentication EAP/802.1X server-based authentication As a network client, HP Jetdirect full-featured print servers... both the client and the network authentication server. Dynamic encryption keys are encapsulated within transport....1X credentials to the print server client. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols...
...print server to generate the pre-shared key. IPsec, RFC 2401 provides additional protection through authentication and encryption protocols. 4 Chapter 1 Introducing the HP Jetdirect print server ENWW Authentication EAP/802.1X server-based authentication As a network client, HP Jetdirect full-featured print servers... both the client and the network authentication server. Dynamic encryption keys are encapsulated within transport....1X credentials to the print server client. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols...
HP Jetdirect Print Servers - Administrator's Guide
Page 68
..., you might need to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on page 61. Move to another network (IPv4) When moving an HP Jetdirect print server that a wireless network connection is installed. You might configure the print server to use a different BOOTP server. NOTE: If you can open from the printer control panel...
..., you might need to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on page 61. Move to another network (IPv4) When moving an HP Jetdirect print server that a wireless network connection is installed. You might configure the print server to use a different BOOTP server. NOTE: If you can open from the printer control panel...
HP Jetdirect Print Servers - Administrator's Guide
Page 73
... with wireless settings for your network. NOTE: HP Web Jetadmin 8.0 does not support SNMP configuration over IPv4. However, you can view HP Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) over IPv6 protocols. If a wireless network connection is not established, you can use the embedded Web server to configure the HP Jetdirect wireless print server with the HP Jetdirect embedded Web...
... with wireless settings for your network. NOTE: HP Web Jetadmin 8.0 does not support SNMP configuration over IPv4. However, you can view HP Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) over IPv6 protocols. If a wireless network connection is not established, you can use the embedded Web server to configure the HP Jetdirect wireless print server with the HP Jetdirect embedded Web...
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 15
... • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with the latest firmware available - PEAP & EAP-TLS support • J7942A/J7942G en3700 USB External Print Server with the latest firmware available - the identity certificates received from other cases, like EAP-TLS, Jetdirect will send its Identity ...that CA. PEAP support • J7997G 630n EIO 10/100/1000T Print Server with the latest firmware available - All that CA) when Jetdirect is receiving a certificate from Microsoft Many HP Jetdirect devices can be configured, it is supported. Ethernet switches have long ...
... • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with the latest firmware available - PEAP & EAP-TLS support • J7942A/J7942G en3700 USB External Print Server with the latest firmware available - the identity certificates received from other cases, like EAP-TLS, Jetdirect will send its Identity ...that CA. PEAP support • J7997G 630n EIO 10/100/1000T Print Server with the latest firmware available - All that CA) when Jetdirect is receiving a certificate from Microsoft Many HP Jetdirect devices can be configured, it is supported. Ethernet switches have long ...