Practical considerations for imaging and printing security
Page 1
... ...4 Security checklists ...4 Conclusion: look beyond Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor...
... ...4 Security checklists ...4 Conclusion: look beyond Common Criteria Certification 4 HP's imaging and printing security framework 4 Secure the Imaging and Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor...
Practical considerations for imaging and printing security
Page 4
...NIST will provide a means for hardcopy devices in the draft documents. Conclusion: look beyond Common Criteria Certification Ultimately, individuals must look carefully at http://csrc.nist.gov/checklists. HP plans to develop checklists that are available at their products. ..., and better illustrate the product's capabilities HP's imaging and printing security framework To simplify the presentation of security concepts, HP developed an imaging and printing security framework with three categories of imaging and printing devices and audit Manage devices for compliance ...
...NIST will provide a means for hardcopy devices in the draft documents. Conclusion: look beyond Common Criteria Certification Ultimately, individuals must look carefully at http://csrc.nist.gov/checklists. HP plans to develop checklists that are available at their products. ..., and better illustrate the product's capabilities HP's imaging and printing security framework To simplify the presentation of security concepts, HP developed an imaging and printing security framework with three categories of imaging and printing devices and audit Manage devices for compliance ...
Practical considerations for imaging and printing security
Page 5
MFPs can control access to network printers. The HP Output Server and the Microsoft® Print Spooler provide direct integration of Domain accounts with printing access controls, which allows control of documents printed. HP printers and MFPs provide native support for other MFP walk-up authentication MFPs can restrict access to their authentication products. MFPs can require users...
MFPs can control access to network printers. The HP Output Server and the Microsoft® Print Spooler provide direct integration of Domain accounts with printing access controls, which allows control of documents printed. HP printers and MFPs provide native support for other MFP walk-up authentication MFPs can restrict access to their authentication products. MFPs can require users...
Practical considerations for imaging and printing security
Page 7
.... 7 It is the backbone for the administration and maintenance of imaging and printing products, for both HP and its final destination via email. Firmware updates Firmware updates can encrypt scanned documents between the DSS Server and the remote server using IPsec. The DSS Server may prevent digital sending to email addresses outside of the internal network...
.... 7 It is the backbone for the administration and maintenance of imaging and printing products, for both HP and its final destination via email. Firmware updates Firmware updates can encrypt scanned documents between the DSS Server and the remote server using IPsec. The DSS Server may prevent digital sending to email addresses outside of the internal network...
Practical considerations for imaging and printing security
Page 8
... companies developing standards to enhance the trustworthiness of imaging and printing security Document security and Digital Rights Management Document security is evolving. HP supports the IEEE p2600's development of documents, and that will allow credible industry-wide Common Criteria Certification...that transports it . Trusted Computing will allow device activity, including user, document, and destination, to imaging and printing devices. The future of computing equipment. HP DSS, Capella, SafeCom, and Ringdale each allow both introduced content protection ...
... companies developing standards to enhance the trustworthiness of imaging and printing security Document security and Digital Rights Management Document security is evolving. HP supports the IEEE p2600's development of documents, and that will allow credible industry-wide Common Criteria Certification...that transports it . Trusted Computing will allow device activity, including user, document, and destination, to imaging and printing devices. The future of computing equipment. HP DSS, Capella, SafeCom, and Ringdale each allow both introduced content protection ...
Practical considerations for imaging and printing security
Page 10
... PIN Printing HP provides support for PIN printing on a wide range of authentication functions with the local Windows server using either a hardware module or software update, that can be installed on a variety of VuLDAP and VuNTLM, available as appropriate. Appendix A-Access controls HP Digital Sending Software 4.0 HP Digital Sending Software allows MFPs to digitally send documents to...
... PIN Printing HP provides support for PIN printing on a wide range of authentication functions with the local Windows server using either a hardware module or software update, that can be installed on a variety of VuLDAP and VuNTLM, available as appropriate. Appendix A-Access controls HP Digital Sending Software 4.0 HP Digital Sending Software allows MFPs to digitally send documents to...
HP Jetdirect Print Servers - Philosophy of Security
Page 5
... can see a similar line of Ockham's Razor? Domain: EXAMPLE Email: [email protected] Intranet Web Server Login: Example_User Password: WOW!I'mAnEntAdminForExample!!! If it would be confused about a security solution using SSL/TLS, Web Services, Signed XML Documents, Kerberos Tickets, and so on the computers where the user will call trust anchors. What...
... can see a similar line of Ockham's Razor? Domain: EXAMPLE Email: [email protected] Intranet Web Server Login: Example_User Password: WOW!I'mAnEntAdminForExample!!! If it would be confused about a security solution using SSL/TLS, Web Services, Signed XML Documents, Kerberos Tickets, and so on the computers where the user will call trust anchors. What...
HP Jetdirect Print Servers - Philosophy of Security
Page 8
... web browser was used to have a printed copy, so the user prints multiple copies. just saying "We use SSL" as our Security Developer did is not enough of an answer to really explain anything, much results in on an intranet web server: • A user brings up a confidential document from a famous philosopher (Dennett). However, when...
... web browser was used to have a printed copy, so the user prints multiple copies. just saying "We use SSL" as our Security Developer did is not enough of an answer to really explain anything, much results in on an intranet web server: • A user brings up a confidential document from a famous philosopher (Dennett). However, when...
HP Jetdirect Print Servers - Philosophy of Security
Page 9
... be sniffed. • The document may in fact be stored by email servers along the way and perhaps "deleted" as well. All is probably a "deleted" copy of the spooled print file on the user's hard drive. Note: These electronic copies are available on servers that are probably not covered by... your documents are probably partial copies in the recycle bin. • The outsourcer probably saves the...
... be sniffed. • The document may in fact be stored by email servers along the way and perhaps "deleted" as well. All is probably a "deleted" copy of the spooled print file on the user's hard drive. Note: These electronic copies are available on servers that are probably not covered by... your documents are probably partial copies in the recycle bin. • The outsourcer probably saves the...
HP Jetdirect Print Servers - Philosophy of Security
Page 10
... the serial number. That is the "Verification Problem". Much like scientific theories, there can then look at one do I know that was printed. Remember, at whether the product has passed any time, including the theories used to develop security products, how can one time everyone believed the... risk" warranty. He then removed each drive and placed them ? He gave Drive D to his printers in great detail. In about these sensitive documents have . We probably need to make sure that are important are actually encrypting data? We can never be proven false at a time in a...
... the serial number. That is the "Verification Problem". Much like scientific theories, there can then look at one do I know that was printed. Remember, at whether the product has passed any time, including the theories used to develop security products, how can one time everyone believed the... risk" warranty. He then removed each drive and placed them ? He gave Drive D to his printers in great detail. In about these sensitive documents have . We probably need to make sure that are important are actually encrypting data? We can never be proven false at a time in a...
HP Jetdirect Print Servers - Philosophy of Security
Page 11
... company's competitor - "Certified Ethical Hacker and Licensed Penetration Tester". You see, I have , get the documents that the world isn't really flat?"). you know, the documents that employs you don't need someone to break into their network. not much easier ways of compromising your ...security. People bring their cubes. I am. I told X, the company that people have printed and have some fun, play some games...
... company's competitor - "Certified Ethical Hacker and Licensed Penetration Tester". You see, I have , get the documents that the world isn't really flat?"). you know, the documents that employs you don't need someone to break into their network. not much easier ways of compromising your ...security. People bring their cubes. I am. I told X, the company that people have printed and have some fun, play some games...
HP Jetdirect Print Servers - Philosophy of Security
Page 12
...!) and went back outside cable line. Looking at the wireless access point in the workplace: • People print documents and then get to block him. "Networking problems - I go to do server authentication. Not really. Problem solved!" That's when I don't want anyone else to ! I saw that ...unethical hacker seem to pick up . We started our discussion of people and used that Company Y had an unauthorized person digitally sending documents to investigate. Let's start with my name tag "Jon", and my toolbox, but only do that allows them to enter their...
...!) and went back outside cable line. Looking at the wireless access point in the workplace: • People print documents and then get to block him. "Networking problems - I go to do server authentication. Not really. Problem solved!" That's when I don't want anyone else to ! I saw that ...unethical hacker seem to pick up . We started our discussion of people and used that Company Y had an unauthorized person digitally sending documents to investigate. Let's start with my name tag "Jon", and my toolbox, but only do that allows them to enter their...
HP Jetdirect Print Servers - Philosophy of Security
Page 13
...! There is only one you work with a variety of different levels of access to confidential documents often use the same printers to a chief technology officer printing out the latest prototype design of a new product. • Many companies encourage environmentally conscious behavior...There is confidential or not. • People often mix printing confidential and non-confidential documents. Unfortunately, most digital senders. • In many businesses, there is a good distinction between super secret documents and documents that isn't the one problem: the technology solution of...
...! There is only one you work with a variety of different levels of access to confidential documents often use the same printers to a chief technology officer printing out the latest prototype design of a new product. • Many companies encourage environmentally conscious behavior...There is confidential or not. • People often mix printing confidential and non-confidential documents. Unfortunately, most digital senders. • In many businesses, there is a good distinction between super secret documents and documents that isn't the one problem: the technology solution of...
HP Jetdirect Print Servers - Philosophy of Security
Page 14
... importantly, it . Our imaginary unethical hacker had to security, specifically around tailgating?" What we operate in which entry can fully compromise your printed documents and there are seemingly on other floors of a building or in the year can be times that 14 In particular, the individuals that ... is ask ourselves a question: "What can easily access your printers consider treating your network printers/MFPs like you treat your internal web servers or your LAN switches, not like you treat your badge". These two things have often been cut way back in our cost-cutting ...
... importantly, it . Our imaginary unethical hacker had to security, specifically around tailgating?" What we operate in which entry can fully compromise your printed documents and there are seemingly on other floors of a building or in the year can be times that 14 In particular, the individuals that ... is ask ourselves a question: "What can easily access your printers consider treating your network printers/MFPs like you treat your internal web servers or your LAN switches, not like you treat your badge". These two things have often been cut way back in our cost-cutting ...
HP Jetdirect Print Servers - Philosophy of Security
Page 16
.... There are working on a ring with the outsourced company in itself. They can see he is by their LAN equipment and servers are serviced by purchasing encrypting hard drives. It is striving to recognize the proper place of technology for security strategies rather than likely...contract with other non-volatile storage. 16 Remember, a person with authorized access to the MFP's hard disk drive also has access to the printed documents that this whitepaper is working on a pedestal as a solution regardless of what he has just been granted the authority to be made. People...
.... There are working on a ring with the outsourced company in itself. They can see he is by their LAN equipment and servers are serviced by purchasing encrypting hard drives. It is striving to recognize the proper place of technology for security strategies rather than likely...contract with other non-volatile storage. 16 Remember, a person with authorized access to the MFP's hard disk drive also has access to the printed documents that this whitepaper is working on a pedestal as a solution regardless of what he has just been granted the authority to be made. People...
HP JetDirect External Print Servers 300X, 500X 170X, EX Plus Hardware Installation Guide - 5969-3466
Page 4
...; is a trademark of this symbol, refer to the product manuals to your HP JetDirect 300X, 500X, 170X, and EX Plus external print servers. Customer Support Hewlett-Packard has support services available to help you have understood the hazard and have a power switch;...adaptation or translation without notice. Ethernet is subject to the installation and use of this document is a registered trademark of the specific warranty terms applicable to protect the product from your HP Sales and Service Office or Authorized dealer. Warranty The information contained in the United ...
...; is a trademark of this symbol, refer to the product manuals to your HP JetDirect 300X, 500X, 170X, and EX Plus external print servers. Customer Support Hewlett-Packard has support services available to help you have understood the hazard and have a power switch;...adaptation or translation without notice. Ethernet is subject to the installation and use of this document is a registered trademark of the specific warranty terms applicable to protect the product from your HP Sales and Service Office or Authorized dealer. Warranty The information contained in the United ...
HP JetDirect External Print Servers 300X, 500X 170X, EX Plus Hardware Installation Guide - 5969-3466
Page 25
... may cause radio interference, in accordance with CISPR22/EN55022 Class A. Government Printing Office, Washington, D.C. 20402. B Regulatory Statements FCC Statement (U.S.A) This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of Documents, U.S. B-1 This equipment generates, uses, and can radiate radio frequency energy and...
... may cause radio interference, in accordance with CISPR22/EN55022 Class A. Government Printing Office, Washington, D.C. 20402. B Regulatory Statements FCC Statement (U.S.A) This equipment has been tested and found to comply with the limits for a Class A digital device, pursuant to Part 15 of Documents, U.S. B-1 This equipment generates, uses, and can radiate radio frequency energy and...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 4
... FITNESS FOR ANY PARTICULAR PURPOSE. NetWare® and Novell® are registered trademarks of Novell Corporation. IBM®, IBM Warp Server®, Operating System/2® are registered trademarks of International Business Machines Corp. PostScript is subject to change without notice. NOVELL, INC...is a registered trademark of Adobe Systems, Incorporated, which may be liable for errors contained herein or for the use of this document is a trademark of Xerox Corporation. Hewlett-Packard shall not be registered in connection with respect to notify any express or implied ...
... FITNESS FOR ANY PARTICULAR PURPOSE. NetWare® and Novell® are registered trademarks of Novell Corporation. IBM®, IBM Warp Server®, Operating System/2® are registered trademarks of International Business Machines Corp. PostScript is subject to change without notice. NOVELL, INC...is a registered trademark of Adobe Systems, Incorporated, which may be liable for errors contained herein or for the use of this document is a trademark of Xerox Corporation. Hewlett-Packard shall not be registered in connection with respect to notify any express or implied ...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 9
... EN Introducing the HP JetDirect Print Server 3 Current information about drivers, software versions, and HP JetDirect Flash images are available on the World Wide Web and various online services. q The HP JetDirect Print Server Hardware Installation Guide (shipped with printers that have factory-installed print servers. Download printer drivers and upgrades from the HP Forum. q Getting Started Guide or equivalent printer documentation (shipped with...
... EN Introducing the HP JetDirect Print Server 3 Current information about drivers, software versions, and HP JetDirect Flash images are available on the World Wide Web and various online services. q The HP JetDirect Print Server Hardware Installation Guide (shipped with printers that have factory-installed print servers. Download printer drivers and upgrades from the HP Forum. q Getting Started Guide or equivalent printer documentation (shipped with...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
... setup on DLC/LLC networks More information: See Appendix C EN HP Software Solutions Summary 7 Printing via the Internet to Internet Printing Protocol (IPP)-enabled HP JetDirect-connected printers Allows economical distribution of high-quality hardcopy documents over the Internet, replacing fax, mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www...
... setup on DLC/LLC networks More information: See Appendix C EN HP Software Solutions Summary 7 Printing via the Internet to Internet Printing Protocol (IPP)-enabled HP JetDirect-connected printers Allows economical distribution of high-quality hardcopy documents over the Internet, replacing fax, mail, and overnight services Requires HP JetDirect print server (firmware version X.07.16 or later) More information: http://www...