Practical considerations for imaging and printing security
Page 6
...configuration and is primarily intended for small networks lacking sophisticated IT administration. Secure IPP (IPP-S) The secure form of the IPP protocol using SSL/TLS provides security of web protocols and is implemented as those with HP Jetdirect devices Network connectivity for HP imaging and printing... access control to extend an imaging and printing device's functionality. Vulnerabilities, viruses, and worms Vulnerability assessments are allowed access. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic ...
...configuration and is primarily intended for small networks lacking sophisticated IT administration. Secure IPP (IPP-S) The secure form of the IPP protocol using SSL/TLS provides security of web protocols and is implemented as those with HP Jetdirect devices Network connectivity for HP imaging and printing... access control to extend an imaging and printing device's functionality. Vulnerabilities, viruses, and worms Vulnerability assessments are allowed access. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic ...
HP Jetdirect Security Guidelines
Page 1
... imaging security. It is the purpose of this information can protect their printing and imaging devices. In all fairness, some websites detailing the attacks and the vulnerabilities on existing HP Jetdirect products, mainly because HP Jetdirect was 1 Resources such as configuration recommendations. however, some of this public information is only a small part of a broad initiative within...
... imaging security. It is the purpose of this information can protect their printing and imaging devices. In all fairness, some websites detailing the attacks and the vulnerabilities on existing HP Jetdirect products, mainly because HP Jetdirect was 1 Resources such as configuration recommendations. however, some of this public information is only a small part of a broad initiative within...
HP Jetdirect Security Guidelines
Page 2
...print servers to share printers became a burden. One of the challenges HP Jetdirect has in network printing, functionality within HP Jetdirect was designed to the best of Use' design criterion now has an arch nemesis: 'Security'. Protocol suites such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely and had their firmware updated or their configuration... ports to clients on the network and behave as possible. 2 Popular HP tools, such as Jetadmin, simplified configuration of HP Jetdirect devices by connecting them via networking protocols such as LPD to computers called...
...print servers to share printers became a burden. One of the challenges HP Jetdirect has in network printing, functionality within HP Jetdirect was designed to the best of Use' design criterion now has an arch nemesis: 'Security'. Protocol suites such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely and had their firmware updated or their configuration... ports to clients on the network and behave as possible. 2 Popular HP tools, such as Jetadmin, simplified configuration of HP Jetdirect devices by connecting them via networking protocols such as LPD to computers called...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 6
...a J7961G 635n IPv6/IPsec print server. One of the great features of the Jetdirect device. Using this whitepaper will come from the four main HP Jetdirect product lines, referred to as...the HP Download Manager available at the very least should do not have the most security capability in HP Jetdirect's product line. In order to properly recommend configurations for HP Jetdirect, ... the administrator at http://www.hp.com/go/dlm_sw. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. In many...
...a J7961G 635n IPv6/IPsec print server. One of the great features of the Jetdirect device. Using this whitepaper will come from the four main HP Jetdirect product lines, referred to as...the HP Download Manager available at the very least should do not have the most security capability in HP Jetdirect's product line. In order to properly recommend configurations for HP Jetdirect, ... the administrator at http://www.hp.com/go/dlm_sw. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. In many...
HP Jetdirect Security Guidelines
Page 9
...Print Driver (UPD), which facilitates reports on your HP Jetdirect devices behave the same regarding their password handling. However, when using SNMPv3 easy. All HP Jetdirect firmware files follow the same basic format: a recovery partition and a main functionality partition. There are digitally signed by a trusted CA to recover, albeit with TFTP server information. HP Jetdirect... it is described here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07129. HP Web Jetadmin can be configured to contact HP support. Essentially: if a password has been...
...Print Driver (UPD), which facilitates reports on your HP Jetdirect devices behave the same regarding their password handling. However, when using SNMPv3 easy. All HP Jetdirect firmware files follow the same basic format: a recovery partition and a main functionality partition. There are digitally signed by a trusted CA to recover, albeit with TFTP server information. HP Jetdirect... it is described here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07129. HP Web Jetadmin can be configured to contact HP support. Essentially: if a password has been...
HP Jetdirect Security Guidelines
Page 10
... intercepts IP packets from our functional diagram, HP Jetdirect controls the networking stack and does not parse PJL and cannot be opened using listening device hidden in a manner that was sent between an FTP client and an FTP server, it can be configured to plant the listening device in the conference...commands. The ability to use Adobe Acrobat Reader to provide a lot of concern among customers. If the MITM node has a copy of a print job, it can use the EWS to avoid plain-text transmission of the individuals leaving the conference room. In addition, many switch vendors offer...
... intercepts IP packets from our functional diagram, HP Jetdirect controls the networking stack and does not parse PJL and cannot be opened using listening device hidden in a manner that was sent between an FTP client and an FTP server, it can be configured to plant the listening device in the conference...commands. The ability to use Adobe Acrobat Reader to provide a lot of concern among customers. If the MITM node has a copy of a print job, it can use the EWS to avoid plain-text transmission of the individuals leaving the conference room. In addition, many switch vendors offer...
HP Jetdirect Security Guidelines
Page 11
....cfg under the subdirectory of "hpnp" of the TFTP daemon's home directory • Forces HP Jetdirect to remain with very little administration overhead once configured. however, there are many free BOOTP and TFTP servers for a great deal of the TFTP configuration file picasso.cfg: # Allow subnet 192.168.40.0 access allow: 192.168.40.0 255...
....cfg under the subdirectory of "hpnp" of the TFTP daemon's home directory • Forces HP Jetdirect to remain with very little administration overhead once configured. however, there are many free BOOTP and TFTP servers for a great deal of the TFTP configuration file picasso.cfg: # Allow subnet 192.168.40.0 access allow: 192.168.40.0 255...
HP Jetdirect Security Guidelines
Page 12
...PASSWORD = 1776 @PJL DINQUIRE PASSWORD @PJL DEFAULT CPLOCK = ON @PJL DINQUIRE CPLOCK @PJL EOJ %-12345X Recommended Security Deployments: SET 2 For the HP Jetdirect products that are in the left-hand navigation bar, and then the "Wizard" tab. Press the "Start Wizard" button to implement on power-up...to use HTTPS when navigating to a customer. 12 The Security level you want to begin the wizard. The TFTP configuration file points to the printer on Jetdirect. This file is a sample content for non HP Web Jetadmin users. Here is sent to a parameter file called "pjlprotection".
...PASSWORD = 1776 @PJL DINQUIRE PASSWORD @PJL DEFAULT CPLOCK = ON @PJL DINQUIRE CPLOCK @PJL EOJ %-12345X Recommended Security Deployments: SET 2 For the HP Jetdirect products that are in the left-hand navigation bar, and then the "Wizard" tab. Press the "Start Wizard" button to implement on power-up...to use HTTPS when navigating to a customer. 12 The Security level you want to begin the wizard. The TFTP configuration file points to the printer on Jetdirect. This file is a sample content for non HP Web Jetadmin users. Here is sent to a parameter file called "pjlprotection".
HP Jetdirect Security Guidelines
Page 17
For a complete discussion of 802.1X, see HP Jetdirect whitepapers on the topic. Special equipment is skipped. 17 Disable unused print protocols and services. For now, this configuration step is required. Allowing device discovery helps in device management, but may not be required in all environments. 802.1X authentication can also be done.
For a complete discussion of 802.1X, see HP Jetdirect whitepapers on the topic. Special equipment is skipped. 17 Disable unused print protocols and services. For now, this configuration step is required. Allowing device discovery helps in device management, but may not be required in all environments. 802.1X authentication can also be done.
HP Jetdirect Security Guidelines
Page 28
... did with a management protocol to Jetdirect without using IPsec, the packets are using HTTPS before navigating to communicate with SET 3, only this page. Select "Allow" for SET 2 executed. If an end station tries to this time, we can begin the IPsec configuration. Be sure that all IP addresses... Wizard for the default rule and then click "Add Rules...". Select "All IP Addresses" and click "Next". 28 Once the Security Wizard configuration has been completed, then we 'll simply say that you are dropped by the IP layer. Recommended Security Deployments: SET 4 First and foremost,...
... did with a management protocol to Jetdirect without using IPsec, the packets are using HTTPS before navigating to communicate with SET 3, only this page. Select "Allow" for SET 2 executed. If an end station tries to this time, we can begin the IPsec configuration. Be sure that all IP addresses... Wizard for the default rule and then click "Add Rules...". Select "All IP Addresses" and click "Next". 28 Once the Security Wizard configuration has been completed, then we 'll simply say that you are dropped by the IP layer. Recommended Security Deployments: SET 4 First and foremost,...
HP Jetdirect Security Guidelines
Page 30
Some Jetdirect models may require you to configure IKE parameters. The one selected is for more emphasis on Interoperability and less on Security. However, this model has a quick set of IKE defaults that can be used. Click "Next". 30 Click "New". Name the IPsec Template.
Some Jetdirect models may require you to configure IKE parameters. The one selected is for more emphasis on Interoperability and less on Security. However, this model has a quick set of IKE defaults that can be used. Click "Next". 30 Click "New". Name the IPsec Template.
HP Jetdirect 620n Print Server Setup Guide
Page 4
... Network Protocols . . . . . 26 A. Troubleshooting Tools HP Jetdirect Configuration Page 22 10/100Base-TX Link Configuration 22 Link-Speed LEDs 23 Link Troubleshooting 23 Resetting to Network Printing Network Printing Configurations 27 Network Protocols 28 Network Addresses 28 Setting Up Your Network ... Printer Operation 10 Remove Power to Printer, Install the Hardware 11 Verify Jetdirect Print Server Operation 12 If Required, Configure Jetdirect With Your Network Settings 14 Add the Printer to Your Network Server or System . . . 16 Microsoft or Novell NetWare Networks 17 UNIX...
... Network Protocols . . . . . 26 A. Troubleshooting Tools HP Jetdirect Configuration Page 22 10/100Base-TX Link Configuration 22 Link-Speed LEDs 23 Link Troubleshooting 23 Resetting to Network Printing Network Printing Configurations 27 Network Protocols 28 Network Addresses 28 Setting Up Your Network ... Printer Operation 10 Remove Power to Printer, Install the Hardware 11 Verify Jetdirect Print Server Operation 12 If Required, Configure Jetdirect With Your Network Settings 14 Add the Printer to Your Network Server or System . . . 16 Microsoft or Novell NetWare Networks 17 UNIX...
HP Jetdirect 620n Print Server Setup Guide
Page 6
..., and to Fast Ethernet (IEEE 802.3/802.3u 10/100Base-TX) networks. However, you can manually configure the link using full- ENWW Introduction 6 1 Introduction HP Jetdirect EIO internal print servers are network interface cards for a network connection using an HP Jetdirect EIO print server is established. or half-duplex mode. A typical network using an unshielded, twisted-pair network cable...
..., and to Fast Ethernet (IEEE 802.3/802.3u 10/100Base-TX) networks. However, you can manually configure the link using full- ENWW Introduction 6 1 Introduction HP Jetdirect EIO internal print servers are network interface cards for a network connection using an HP Jetdirect EIO print server is established. or half-duplex mode. A typical network using an unshielded, twisted-pair network cable...
HP Jetdirect 620n Print Server Setup Guide
Page 7
Figure 1-2 Typical HP Jetdirect Print Server Installation HP Jetdirect EIO Using the HP Jetdirect print server, setting up your network printer is easy. ● Install the HP Jetdirect print server hardware and connect the printer to your network. ● Use network installation software to configure the print server for network communications, and to add the printer on each computer system that will send print jobs directly to the printer. For detailed instructions, see Chapter 2. ENWW Introduction 7
Figure 1-2 Typical HP Jetdirect Print Server Installation HP Jetdirect EIO Using the HP Jetdirect print server, setting up your network printer is easy. ● Install the HP Jetdirect print server hardware and connect the printer to your network. ● Use network installation software to configure the print server for network communications, and to add the printer on each computer system that will send print jobs directly to the printer. For detailed instructions, see Chapter 2. ENWW Introduction 7
HP Jetdirect 620n Print Server Setup Guide
Page 10
... printer documentation for this purpose. 2 Installation Procedures CAUTION HP Jetdirect cards contain electronic components that can be damaged by printer model. To print a Printer Configuration page, see your printer is useful for specific instructions. The Printer Configuration page will display the operating status of the Printer Configuration page may also vary by static electricity through electrostatic...
... printer documentation for this purpose. 2 Installation Procedures CAUTION HP Jetdirect cards contain electronic components that can be damaged by printer model. To print a Printer Configuration page, see your printer is useful for specific instructions. The Printer Configuration page will display the operating status of the Printer Configuration page may also vary by static electricity through electrostatic...
HP Jetdirect 620n Print Server Setup Guide
Page 12
... of the Jetdirect Configuration Page, look for status messages. In HP DesignJet printers, Jetdirect configuration information will automatically print when you have: ■ Installed the print server correctly and properly connected the print server to the network ■ Verified that may appear on the Jetdirect Configuration Page, refer to If Required, Configure Jetdirect With Your Network Settings. See Figure 2-2. Verify Jetdirect Print Server Operation 1. Print a Jetdirect Configuration page and check...
... of the Jetdirect Configuration Page, look for status messages. In HP DesignJet printers, Jetdirect configuration information will automatically print when you have: ■ Installed the print server correctly and properly connected the print server to the network ■ Verified that may appear on the Jetdirect Configuration Page, refer to If Required, Configure Jetdirect With Your Network Settings. See Figure 2-2. Verify Jetdirect Print Server Operation 1. Print a Jetdirect Configuration page and check...
HP Jetdirect 620n Print Server Setup Guide
Page 13
Figure 2-2 Example of HP Jetdirect Configuration Page I/O CARD READY ENWW Installation Procedures 13 Note See Chapter 3 in this print server supplied electronically on the HP Jetdirect CD-ROM. For persistent problems, refer to the HP Jetdirect Administrator's Guide for this guide for link configuration and troubleshooting information.
Figure 2-2 Example of HP Jetdirect Configuration Page I/O CARD READY ENWW Installation Procedures 13 Note See Chapter 3 in this print server supplied electronically on the HP Jetdirect CD-ROM. For persistent problems, refer to the HP Jetdirect Administrator's Guide for this guide for link configuration and troubleshooting information.
HP Jetdirect 620n Print Server Setup Guide
Page 14
... printer to your printer (recommended), or on the HP Jetdirect Or, use a Web browser to access the embedded Web server on the HP Jetdirect print server. See your network-ready printer CD-ROM. If Required, Configure Jetdirect With Your Network Settings If your network requires that you configure network settings on the print server before you add the printer to your network...
... printer to your printer (recommended), or on the HP Jetdirect Or, use a Web browser to access the embedded Web server on the HP Jetdirect print server. See your network-ready printer CD-ROM. If Required, Configure Jetdirect With Your Network Settings If your network requires that you configure network settings on the print server before you add the printer to your network...
HP Jetdirect 620n Print Server Setup Guide
Page 15
... an advanced configuration method, such as HP Web JetAdmin) or other network utilities to configure basic network parameters on the HP Jetdirect CD-ROM. For instructions, see the applicable HP Jetdirect Administrator's Guide on the HP Jetdirect CD-ROM. ● Use the printer's control panel (for this print server included on the print server. See Appendix C for more information, see the HP Jetdirect Administrator's Guide...
... an advanced configuration method, such as HP Web JetAdmin) or other network utilities to configure basic network parameters on the HP Jetdirect CD-ROM. For instructions, see the applicable HP Jetdirect Administrator's Guide on the HP Jetdirect CD-ROM. ● Use the printer's control panel (for this print server included on the print server. See Appendix C for more information, see the HP Jetdirect Administrator's Guide...