Practical considerations for imaging and printing security
Page 6
...that only IT deployed and trusted devices, such as HP and its products meet the threat posed by the HP Jetdirect family of hackers continues to extend an imaging and printing device's functionality. HP Jetdirect provides many secure network protocols and services, including: ...access control to remove all current major operating systems, including Windows, Unix®, and Linux®. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to avoid installing malware on page 12. SNMPv3...
...that only IT deployed and trusted devices, such as HP and its products meet the threat posed by the HP Jetdirect family of hackers continues to extend an imaging and printing device's functionality. HP Jetdirect provides many secure network protocols and services, including: ...access control to remove all current major operating systems, including Windows, Unix®, and Linux®. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to avoid installing malware on page 12. SNMPv3...
HP Jetdirect Security Guidelines
Page 5
..., SNMPv3, 802.1X PEAP, 802.1X EAP-TLS. First, if the HP Jetdirect device was introduced before the year 2000, HP recommends that are available for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase...
..., SNMPv3, 802.1X PEAP, 802.1X EAP-TLS. First, if the HP Jetdirect device was introduced before the year 2000, HP recommends that are available for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase...
HP Jetdirect Security Guidelines
Page 6
... and performing an evaluation of a Firewall. Using this operation is the ability to install a J7961G 635n IPv6/IPsec print server. Printers and MFPs with a lot of EIO based printers, proper deployment of their printing and imaging infrastructure. The administrative guideline for HP Jetdirect, four different administrative guidelines will not upgrade the security capabilities of having an EIO based...
... and performing an evaluation of a Firewall. Using this operation is the ability to install a J7961G 635n IPv6/IPsec print server. Printers and MFPs with a lot of EIO based printers, proper deployment of their printing and imaging infrastructure. The administrative guideline for HP Jetdirect, four different administrative guidelines will not upgrade the security capabilities of having an EIO based...
HP Jetdirect Security Guidelines
Page 7
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... features. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 4 xx represents a release number. and 64-bit), Server 2003, Vista Microsoft Terminal Server and Citrix MetaFrame environments2 J7961G (635n) J7997G ...1179-compliant) systems2 J8003E J8004E J8005E IPP (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. ...
... features. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 4 xx represents a release number. and 64-bit), Server 2003, Vista Microsoft Terminal Server and Citrix MetaFrame environments2 J7961G (635n) J7997G ...1179-compliant) systems2 J8003E J8004E J8005E IPP (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... Manuals 5 Firmware upgrade files may control IP traffic using both IPv4 and IPv6 networks. HP Support HP Online Support Click your network. The HP Web site: http://www.hp.com/support/net_printing is a great place to a quick solution! IPsec and Firewall capabilities depend on the HP Jetdirect print server product and the printer/MFP in which it is installed. ●...
... Manuals 5 Firmware upgrade files may control IP traffic using both IPv4 and IPv6 networks. HP Support HP Online Support Click your network. The HP Web site: http://www.hp.com/support/net_printing is a great place to a quick solution! IPsec and Firewall capabilities depend on the HP Jetdirect print server product and the printer/MFP in which it is installed. ●...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... configure or view IPv4 and IPv6 parameters. See Troubleshooting the HP Jetdirect Print Server on the HP Jetdirect print server and printer, configuration of the print server to one that the IP address does not conflict with updated settings. If the current BOOTP server is not reachable, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control...
... configure or view IPv4 and IPv6 parameters. See Troubleshooting the HP Jetdirect Print Server on the HP Jetdirect print server and printer, configuration of the print server to one that the IP address does not conflict with updated settings. If the current BOOTP server is not reachable, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... Browser Exceptions Due to configure an IPv4 address on the print server. Or, you can use the embedded Web server, the HP Jetdirect print server must use a compatible Web browser. For basic information on IPv6 addresses, see TCP/IP Configuration on the print server, although manual configuration is available. Using IPv6 protocols, IPv6 addresses are many ways to known problems experienced during...
... Browser Exceptions Due to configure an IPv4 address on the print server. Or, you can use the embedded Web server, the HP Jetdirect print server must use a compatible Web browser. For basic information on IPv6 addresses, see TCP/IP Configuration on the print server, although manual configuration is available. Using IPv6 protocols, IPv6 addresses are many ways to known problems experienced during...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
...server. ENWW Viewing the Embedded Web Server 63 To access the embedded Web server, perform the following steps: 1. For more information. The IP address configured on the print server for initial access. Figure 4-2 Entering an IP Address or Fully Qualified Domain Name 3. Run a supported Web browser. 2. If prompted with IPsec... more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is typically enclosed in the range 169.254.1.0 to retrieve a valid IP ...
...server. ENWW Viewing the Embedded Web Server 63 To access the embedded Web server, perform the following steps: 1. For more information. The IP address configured on the print server for initial access. Figure 4-2 Entering an IP Address or Fully Qualified Domain Name 3. Run a supported Web browser. 2. If prompted with IPsec... more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is typically enclosed in the range 169.254.1.0 to retrieve a valid IP ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
..., IPsec configuration is relatively complex. NOTE: To ensure communications with an HP Jetdirect print server configured with an IPsec policy, be sure that will fail. ENWW 97 IPsec policies configured on the print server until...print server are also properly configured. 5 IPsec/Firewall Configuration (V.36.xx) (Full-featured print servers only) IPsec/Firewall features provide network-layer security on both Firewall and IPsec protection. ● If IPsec is not supported, then IP traffic may be controlled using both IPv4 and IPv6 networks. Internet Protocol security (IPsec...
..., IPsec configuration is relatively complex. NOTE: To ensure communications with an HP Jetdirect print server configured with an IPsec policy, be sure that will fail. ENWW 97 IPsec policies configured on the print server until...print server are also properly configured. 5 IPsec/Firewall Configuration (V.36.xx) (Full-featured print servers only) IPsec/Firewall features provide network-layer security on both Firewall and IPsec protection. ● If IPsec is not supported, then IP traffic may be controlled using both IPv4 and IPv6 networks. Internet Protocol security (IPsec...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
... an action for the print server. Do not process (discard) the specified IP traffic. ● Require traffic to be deleted and click Delete. If IPsec is Any Port. ENWW HP Jetdirect IPsec/Firewall Wizard 105 ICMP ...HP Jetdirect print server or device. ● Remote Service: A service on the service, select Port Range or Specific Port, then enter the port range or port in the fields provided. instead, it cannot be protected with an IPsec/Firewall policy. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6...
... an action for the print server. Do not process (discard) the specified IP traffic. ● Require traffic to be deleted and click Delete. If IPsec is Any Port. ENWW HP Jetdirect IPsec/Firewall Wizard 105 ICMP ...HP Jetdirect print server or device. ● Remote Service: A service on the service, select Port Range or Specific Port, then enter the port range or port in the fields provided. instead, it cannot be protected with an IPsec/Firewall policy. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
... lists the IPv4 and IPv6 addresses configured on the IPsec rules is displayed. No Rule Displays the number of packets dropped that are being resent. Generic Drops Displays the number of packets received for use . Table 8-15 IPsec Error Log Message Description Deprecated... through ICMP error messages. In addition, the template may not be reassembled. Review your HP Jetdirect print server. Upgrade Jetdirect Firmware You should upgrade the Jetdirect firmware to drop all non-IPsec traffic, the number of rejected packets is configured as the one sent. Table 8-16...
... lists the IPv4 and IPv6 addresses configured on the IPsec rules is displayed. No Rule Displays the number of packets dropped that are being resent. Generic Drops Displays the number of packets received for use . Table 8-15 IPsec Error Log Message Description Deprecated... through ICMP error messages. In addition, the template may not be reassembled. Review your HP Jetdirect print server. Upgrade Jetdirect Firmware You should upgrade the Jetdirect firmware to drop all non-IPsec traffic, the number of rejected packets is configured as the one sent. Table 8-16...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
... V38.xx.nn 1 Embedded HP Jetdirect print server support for HP support use those protocols. Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support J7997G (630n) J8010E, J8011E, J8013E, J8017E FTP printing 2 Chapter 1 Introducing the HP Jetdirect print server ENWW and 64-bit). HP Jetdirect print server support for Internet protocol security (IPsec) depends on the print server and the printer/MFP in...
... V38.xx.nn 1 Embedded HP Jetdirect print server support for HP support use those protocols. Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support J7997G (630n) J8010E, J8011E, J8013E, J8017E FTP printing 2 Chapter 1 Introducing the HP Jetdirect print server ENWW and 64-bit). HP Jetdirect print server support for Internet protocol security (IPsec) depends on the print server and the printer/MFP in...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
... 2138) server. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. Dynamic WPA encryption protocols are used for network communications to provide enhanced security. ● WPA/WPA2-Enterprise Requires 802.1X credentials to use with the authentication server, the infrastructure device can control the degree of both IPv4 and IPv6 networks. IPsec/Firewall IPsec/Firewall features...
... 2138) server. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols. Dynamic WPA encryption protocols are used for network communications to provide enhanced security. ● WPA/WPA2-Enterprise Requires 802.1X credentials to use with the authentication server, the infrastructure device can control the degree of both IPv4 and IPv6 networks. IPsec/Firewall IPsec/Firewall features...
HP Jetdirect Print Server Administrator's Guide
Page 11
... the HP Jetdirect print servers and not a separate computer running print server software. When connected through a wireless connection to the network. For firmware updates, see HP Jetdirect Embedded Web Server (V.31.xx)), and network management applications. NOTE Unless otherwise specified, the term print server in a convenient location and share it is an encoded value for TCP/IPv6 (Internet Protocol version 6) and IPsec (Internet...
... the HP Jetdirect print servers and not a separate computer running print server software. When connected through a wireless connection to the network. For firmware updates, see HP Jetdirect Embedded Web Server (V.31.xx)), and network management applications. NOTE Unless otherwise specified, the term print server in a convenient location and share it is an encoded value for TCP/IPv6 (Internet Protocol version 6) and IPsec (Internet...
HP Jetdirect Print Server Administrator's Guide
Page 13
NOTE On IPv4/IPv6 networks, HP Jetdirect 635n supports SNMP/IPv4 agents only. HTTPS Full-featured HP Jetdirect print servers (such as 635n) support HTTPS (Secure Hyper Text Transfer Protocol) for client authentication. HP Jetdirect 635n print servers support the following EAP/802.1X methods: ■ PEAP (Protected Extensible Authentication Protocol). PEAP is a mutual authentication protocol that connects the print server to the print server client. ENWW Security Protocols...
NOTE On IPv4/IPv6 networks, HP Jetdirect 635n supports SNMP/IPv4 agents only. HTTPS Full-featured HP Jetdirect print servers (such as 635n) support HTTPS (Secure Hyper Text Transfer Protocol) for client authentication. HP Jetdirect 635n print servers support the following EAP/802.1X methods: ■ PEAP (Protected Extensible Authentication Protocol). PEAP is a mutual authentication protocol that connects the print server to the print server client. ENWW Security Protocols...
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 15
... & EAP-TLS support • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with the latest firmware available - Microsoft's IAS comes with the latest firmware available - the identity certificates received from other cases, like EAP-TLS, Jetdirect will send its Identity certificate as the Internet Authentication Service (IAS) from Microsoft Many HP Jetdirect devices can store one Identity certificate...
... & EAP-TLS support • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with the latest firmware available - Microsoft's IAS comes with the latest firmware available - the identity certificates received from other cases, like EAP-TLS, Jetdirect will send its Identity certificate as the Internet Authentication Service (IAS) from Microsoft Many HP Jetdirect devices can store one Identity certificate...
HP Jetdirect Print Servers - Practical IPv6 Deployment for Printing and Imaging Devices
Page 2
... products that experience by United States Department of the myths about IPv6. Because it can help our customers understand these protocols to a 635n card is the only print server that has been certified as IPv6-Capable by providing products which supports IPv4, IPv6, and IPsec in Embedded Jetdirect technology that have on the network by translating private IP...
... products that experience by United States Department of the myths about IPv6. Because it can help our customers understand these protocols to a 635n card is the only print server that has been certified as IPv6-Capable by providing products which supports IPv4, IPv6, and IPsec in Embedded Jetdirect technology that have on the network by translating private IP...