Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
Practical considerations for imaging and printing security
Page 7
... Firmware updates can automatically discover and configure newly installed devices. To control email distribution, the SMTP server used by the DSS Server may be bridged to the digital network, preventing the threat of imaging and printing devices. Fax/LAN bridging The analog fax port of an HP imaging and printing device is isolated from the digital...
... Firmware updates can automatically discover and configure newly installed devices. To control email distribution, the SMTP server used by the DSS Server may be bridged to the digital network, preventing the threat of imaging and printing devices. Fax/LAN bridging The analog fax port of an HP imaging and printing device is isolated from the digital...
Practical considerations for imaging and printing security
Page 9
... by the distribution of those devices. Update firmware images Firmware updates protect against actual needs. 2. Implement access controls HP printers and MFPs allow operations in audit and regulatory compliance. 6. HP provides automated firmware update notification services, and HP Web Jetadmin aids in audit and regulatory compliance. 3. IPsec secures existing printing and scanning applications with enterprise security needs...
... by the distribution of those devices. Update firmware images Firmware updates protect against actual needs. 2. Implement access controls HP printers and MFPs allow operations in audit and regulatory compliance. 6. HP provides automated firmware update notification services, and HP Web Jetadmin aids in audit and regulatory compliance. 3. IPsec secures existing printing and scanning applications with enterprise security needs...
HP JetDirect External Print Servers 300X, 500X 170X, EX Plus Hardware Installation Guide - 5969-3466
Page 20
... button on and solid for five seconds. Resetting to Factory Defaults Once you have configured the HP JetDirect external print server, the configuration settings are cycling through four configurations, as outlined in memory unless you manually reset them. (The firmware is not affected when you reset the configuration settings.) To reset the configuration settings to...
... button on and solid for five seconds. Resetting to Factory Defaults Once you have configured the HP JetDirect external print server, the configuration settings are cycling through four configurations, as outlined in memory unless you manually reset them. (The firmware is not affected when you reset the configuration settings.) To reset the configuration settings to...
HP Jetdirect Security Guidelines
Page 1
... to help customers protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... to help customers protect their printing and imaging devices. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
... such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely and had their firmware updated or their configuration changed. At one of the first print servers to your PC. Does that this growth period in network printing, functionality within HP Jetdirect was directly connected to widely implement security protocols such as TCP/IP. In today...
... such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely and had their firmware updated or their configuration changed. At one of the first print servers to your PC. Does that this growth period in network printing, functionality within HP Jetdirect was directly connected to widely implement security protocols such as TCP/IP. In today...
HP Jetdirect Security Guidelines
Page 4
... firmware on your HP Jetdirect products if you don't want to find a reputable security analyst willing to spend time discussing the security issues associated with Microsoft Windows for Workgroups 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server...
... firmware on your HP Jetdirect products if you don't want to find a reputable security analyst willing to spend time discussing the security issues associated with Microsoft Windows for Workgroups 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server...
HP Jetdirect Security Guidelines
Page 5
... are shown in Table 2 - Some security features of August 2007 are shown. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
... are shown in Table 2 - Some security features of August 2007 are shown. HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
HP Jetdirect Security Guidelines
Page 6
... support. Printers and MFPs with a new external parallel port print server like the 300X will automatically indicate which devices need to be addressing some ways to the latest firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1...HP Jetdirect firmware to use the administrative guideline referenced for securing these devices do the following: • Update all devices to counteract those devices on your windows open. With security configurations, one thing can be careful not to install a J7961G 635n IPv6/IPsec print server...
... support. Printers and MFPs with a new external parallel port print server like the 300X will automatically indicate which devices need to be addressing some ways to the latest firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1...HP Jetdirect firmware to use the administrative guideline referenced for securing these devices do the following: • Update all devices to counteract those devices on your windows open. With security configurations, one thing can be careful not to install a J7961G 635n IPv6/IPsec print server...
HP Jetdirect Security Guidelines
Page 7
... in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G...
... in Table 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G...
HP Jetdirect Security Guidelines
Page 9
... of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SSL/TLS. HP Jetdirect uses this information to start a TFTP client and pull down during the upgrade, etc...), HP Jetdirect will help make your firmware updated on users and their how their printing behavior. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect password and...
... of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SSL/TLS. HP Jetdirect uses this information to start a TFTP client and pull down during the upgrade, etc...), HP Jetdirect will help make your firmware updated on users and their how their printing behavior. HP Jetdirect Hacks: Password and SNMP Community Names HP Jetdirect password and...
HP Jetdirect Security Guidelines
Page 10
firmware upgrades; Let's review what a MITM attack against TCP/IP MITM attacks is the proper deployment of ARP protection and monitoring since ARP poisoning is analogously similar to a person not being able to printing. If the MITM node has a copy of concern among customers. HP Jetdirect Hacks: Sniffing Print... a lot of a PDF file that was sent between that source and that was sent between an email client and email server, it with a text editor. Networking infrastructure equipment can use the EWS to avoid plain-text transmission of all customers concerned ...
firmware upgrades; Let's review what a MITM attack against TCP/IP MITM attacks is the proper deployment of ARP protection and monitoring since ARP poisoning is analogously similar to a person not being able to printing. If the MITM node has a copy of concern among customers. HP Jetdirect Hacks: Sniffing Print... a lot of a PDF file that was sent between that source and that was sent between an email client and email server, it with a text editor. Networking infrastructure equipment can use the EWS to avoid plain-text transmission of all customers concerned ...
HP Jetdirect Security Guidelines
Page 14
This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox. Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 Change the Encryption Strength to be used for all web communication.
This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox. Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 Change the Encryption Strength to be used for all web communication.
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 8
... Windows NT 4.0 q Microsoft Windows 2000 q Apple EtherTalk and LocalTalk q UNIX (HP-UX and Solaris) q Internet (via Internet Printer Connection software) q Linux (RedHat and SuSE) Note If not supplied with firmware version x.08.03 or later. q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX...
... Windows NT 4.0 q Microsoft Windows 2000 q Apple EtherTalk and LocalTalk q UNIX (HP-UX and Solaris) q Internet (via Internet Printer Connection software) q Linux (RedHat and SuSE) Note If not supplied with firmware version x.08.03 or later. q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 12
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
... NetWare* *Supports queue creation (NetWare), and peripheral management from HP Web JetAdmin hosted on Windows NT 4.0 Remote installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management and installation of multiple...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
..., mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www.hp.com/ support/net_printing HP IP/IPX Printer Gateway for NDPS NetWare 4.11, 4.2, 5.0 Simplified installation, printing, and bidirectional management of HP JetDirect-connected printers under Novell Distributed Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
... software are currently limited. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Removing HP Web JetAdmin Software To remove HP Web JetAdmin software from your system to configure or modify your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary EN Note For incoming...
... software are currently limited. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Removing HP Web JetAdmin Software To remove HP Web JetAdmin software from your system to configure or modify your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary EN Note For incoming...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 19
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 49
... and ping commands, use the following : q Windows NT/2000 or UNIX system configured for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on the system, the LAN hardware address requires a specific format. After an IP address is...
... and ping commands, use the following : q Windows NT/2000 or UNIX system configured for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on the system, the LAN hardware address requires a specific format. After an IP address is...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 81
q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. EN 75 The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer...
q TCP/IP client systems with FTP that complies with firmware version x.08.03 or later. Requirements FTP printing requires the following: q HP JetDirect print servers with RFC 959. EN 75 The HP JetDirect FTP server can be enabled or disabled through a configuration utility, such as Telnet. 5 FTP Printing Introduction FTP (File Transfer Protocol) is a basic TCP/IP connectivity utility to transfer...