Practical considerations for imaging and printing security
Page 6
... been affected little by the viruses and worms that afflict enterprise networks. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to provide fleet management of HP imaging and printing devices. Secure IPP (IPP-S) The secure form of the IPP protocol using SSL/TLS, secure IPP requires...
... been affected little by the viruses and worms that afflict enterprise networks. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to provide fleet management of HP imaging and printing devices. Secure IPP (IPP-S) The secure form of the IPP protocol using SSL/TLS, secure IPP requires...
HP Jetdirect Security Guidelines
Page 5
... installed on the formatter for certain printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase...
... installed on the formatter for certain printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase...
HP Jetdirect Security Guidelines
Page 6
...their printer/MFP investment and increase the security of the Jetdirect device. Using this product, we evaluate the various attacks employed against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. These models have cryptographic security capability. • ...on the HP LaserJet 4000 almost ten years ago. In many years. This flexibility will automatically indicate which devices need to be firmware upgraded to install a J7961G 635n IPv6/IPsec print server. In order to as service types. • SET 4: The 635n model and...
...their printer/MFP investment and increase the security of the Jetdirect device. Using this product, we evaluate the various attacks employed against HP Jetdirect and some public information available about vulnerabilities or attacks against HP Jetdirect. These models have cryptographic security capability. • ...on the HP LaserJet 4000 almost ten years ago. In many years. This flexibility will automatically indicate which devices need to be firmware upgraded to install a J7961G 635n IPv6/IPsec print server. In order to as service types. • SET 4: The 635n model and...
HP Jetdirect Security Guidelines
Page 7
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
...J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW For firmware updates, see Embedded Web Server (V.36.xx) on both the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed... support includes TCP/IP (IPv 4 and IPv 6), IPX/SPX, AppleTalk (EtherTalk), DLC/LLC, and advanced security features. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2.
...J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW For firmware updates, see Embedded Web Server (V.36.xx) on both the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed... support includes TCP/IP (IPv 4 and IPv 6), IPX/SPX, AppleTalk (EtherTalk), DLC/LLC, and advanced security features. J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... authentication and encryption protocols. Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. For more information, see IPsec/Firewall Configuration (V.36.xx) on the HP Jetdirect print server product and the printer/MFP in which it is a great place to start for IPsec/Firewall operation, a browser-based wizard...
... authentication and encryption protocols. Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. For more information, see IPsec/Firewall Configuration (V.36.xx) on the HP Jetdirect print server product and the printer/MFP in which it is a great place to start for IPsec/Firewall operation, a browser-based wizard...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
...can use the embedded Web server on the HP Jetdirect print server to configure or view IPv4 and IPv6 parameters. If the current BOOTP server is installed on the new network. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu that ...can be used on the new network, or erase the current IP address and configure another address after it is not reachable, you may change the IP address of selected IPv4/IPv6 and IPsec networking ...
...can use the embedded Web server on the HP Jetdirect print server to configure or view IPv4 and IPv6 parameters. If the current BOOTP server is installed on the new network. Using the Printer Control Panel When supported by the printer, HP Jetdirect EIO or embedded print servers provide a configuration menu that ...can be used on the new network, or erase the current IP address and configure another address after it is not reachable, you may change the IP address of selected IPv4/IPv6 and IPsec networking ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... the following URL: http://www.hp.com/go /webjetadmin. Or, you can be viewed over IPv6 protocols. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. In general, the embedded Web server can manually configure IP parameters using BOOTP (Bootstrap Protocol) or DHCP (Dynamic Host Configuration Protocol) each time the print server is available.
... the following URL: http://www.hp.com/go /webjetadmin. Or, you can be viewed over IPv6 protocols. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. In general, the embedded Web server can manually configure IP parameters using BOOTP (Bootstrap Protocol) or DHCP (Dynamic Host Configuration Protocol) each time the print server is available.
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
... HTTPS (secure HTTP) is required for example, printer1.support.hp.com), enter the host name (in this example, printer1). See TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to retrieve a valid IP address from the...to the embedded Web server. To access the embedded Web server, perform the following steps: 1. Figure 4-2 Entering an IP Address or Fully Qualified Domain Name 3. the "arp" and "ping" commands, HP Web Jetadmin or other management software. If prompted with IPsec support are configured as ...
... HTTPS (secure HTTP) is required for example, printer1.support.hp.com), enter the host name (in this example, printer1). See TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to retrieve a valid IP address from the...to the embedded Web server. To access the embedded Web server, perform the following steps: 1. Figure 4-2 Entering an IP Address or Fully Qualified Domain Name 3. the "arp" and "ping" commands, HP Web Jetadmin or other management software. If prompted with IPsec support are configured as ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
...-to-host communications over a widespread network, such as the Internet, is greatly enhanced. ● Print servers and printers/MFPs that support IPsec may be controlled using both IPv4 and IPv6 networks. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. After a policy is configured, it is not applied on the...
...-to-host communications over a widespread network, such as the Internet, is greatly enhanced. ● Print servers and printers/MFPs that support IPsec may be controlled using both IPv4 and IPv6 networks. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. After a policy is configured, it is not applied on the...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
...type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server or device. ● Remote Service: A service on the service, select.../MFP, and the remote hosts. instead, it cannot be applied to use ports; ENWW HP Jetdirect IPsec/Firewall Wizard 105 The default selection is supported, you must specify an ICMP message type for... supported. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● For TCP or UDP, you must...
...type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server or device. ● Remote Service: A service on the service, select.../MFP, and the remote hosts. instead, it cannot be applied to use ports; ENWW HP Jetdirect IPsec/Firewall Wizard 105 The default selection is supported, you must specify an ICMP message type for... supported. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● For TCP or UDP, you must...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
... of packets dropped that are being used. ENWW HP Jetdirect Security Page 149 In addition, the template may not be reassembled. IPsec Stats IPsec statistics gathered and reported by a new predefined version available for your HP Jetdirect print server. Generic Drops Displays the number of packets received for...provided through ICMP error messages. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on your use , but it may have been replaced by the print server are being resent. AH MAC Errors Displays the number of the following states:...
... of packets dropped that are being used. ENWW HP Jetdirect Security Page 149 In addition, the template may not be reassembled. IPsec Stats IPsec statistics gathered and reported by a new predefined version available for your HP Jetdirect print server. Generic Drops Displays the number of packets received for...provided through ICMP error messages. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on your use , but it may have been replaced by the print server are being resent. AH MAC Errors Displays the number of the following states:...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
... up print queues 157 Step 3. Set up IP parameters 157 Step 2. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec...
... up print queues 157 Step 3. Set up IP parameters 157 Step 2. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
... authentication of both IPv4 and IPv6 networks. IPsec/Firewall IPsec/Firewall features provide network-layer security on each other). ● PEAP (protected EAP) is a proprietary Cisco Systems protocol that must be configured on both the client and the network authentication server. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. IPsec, RFC 2401 provides additional protection...
... authentication of both IPv4 and IPv6 networks. IPsec/Firewall IPsec/Firewall features provide network-layer security on each other). ● PEAP (protected EAP) is a proprietary Cisco Systems protocol that must be configured on both the client and the network authentication server. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. IPsec, RFC 2401 provides additional protection...
HP Jetdirect Print Server Administrator's Guide
Page 11
... enhanced input/output (EIO) slot. ENWW Supported Print Servers 1 By attaching a device directly to the HP Jetdirect print servers and not a separate computer running print server software. If nn appears, it with HP specifications for TCP/IPv6 (Internet Protocol version 6) and IPsec (Internet Protocol security). 3 xx represents a release number. For firmware updates, see HP Jetdirect Embedded Web Server (V.31.xx)), and network management applications.
... enhanced input/output (EIO) slot. ENWW Supported Print Servers 1 By attaching a device directly to the HP Jetdirect print servers and not a separate computer running print server software. If nn appears, it with HP specifications for TCP/IPv6 (Internet Protocol version 6) and IPsec (Internet Protocol security). 3 xx represents a release number. For firmware updates, see HP Jetdirect Embedded Web Server (V.31.xx)), and network management applications.
HP Jetdirect Print Server Administrator's Guide
Page 13
... IPsec objects may be viewed using an 802.1X connection, the print server supports Extensible Authentication Protocol (EAP) with the authentication server, the infrastructure device can allow or block access depending on X.509-compliant digital certificates for secure communications. EAP-TLS is a mutual authentication protocol based on client authentication results. NOTE On IPv4/IPv6 networks, HP Jetdirect 635n...
... IPsec objects may be viewed using an 802.1X connection, the print server supports Extensible Authentication Protocol (EAP) with the authentication server, the infrastructure device can allow or block access depending on X.509-compliant digital certificates for secure communications. EAP-TLS is a mutual authentication protocol based on client authentication results. NOTE On IPv4/IPv6 networks, HP Jetdirect 635n...
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 15
... the latest firmware available - It is important to setup and configure 802.1X for HP Jetdirect, this whitepaper will go /webjetadmin_firmware for client authentication. PEAP & EAP-TLS support • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with Windows Server 2003. Microsoft's IAS comes with the latest firmware available - Ethernet switches have long supported 802.1X. the identity...
... the latest firmware available - It is important to setup and configure 802.1X for HP Jetdirect, this whitepaper will go /webjetadmin_firmware for client authentication. PEAP & EAP-TLS support • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with Windows Server 2003. Microsoft's IAS comes with the latest firmware available - Ethernet switches have long supported 802.1X. the identity...
HP Jetdirect Print Servers - Practical IPv6 Deployment for Printing and Imaging Devices
Page 2
... neutral application deployment. Because it can be deployed with IPv4 and IPv6 running together for IPv6. To answer these protocols to spread. For example: • HP introduced the HP Jetdirect 635n EIO print server which meet the highest certifications currently possible for many questions: What ...IPv4, IPv6, and IPsec in some practical considerations about IPv6. This focus is very easy. • The 635n also has IPv6 Forum's IPv6-Ready Phase-2 logo, the highest for the Intranet to support IPv4 and IPv6 allows a customer to a 635n card is based upon HP's printing and ...
... neutral application deployment. Because it can be deployed with IPv4 and IPv6 running together for IPv6. To answer these protocols to spread. For example: • HP introduced the HP Jetdirect 635n EIO print server which meet the highest certifications currently possible for many questions: What ...IPv4, IPv6, and IPsec in some practical considerations about IPv6. This focus is very easy. • The 635n also has IPv6 Forum's IPv6-Ready Phase-2 logo, the highest for the Intranet to support IPv4 and IPv6 allows a customer to a 635n card is based upon HP's printing and ...