Practical considerations for imaging and printing security
Page 6
... restrict installation of Chailets to authorized administrators, however, as it is used by maintaining their integrity. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to evolve, HP ensures its partners. SNMPv3 provides strong authentication and encryption of management communications and is important to avoid installing...
... restrict installation of Chailets to authorized administrators, however, as it is used by maintaining their integrity. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to evolve, HP ensures its partners. SNMPv3 provides strong authentication and encryption of management communications and is important to avoid installing...
HP Jetdirect Security Guidelines
Page 5
..., HP can provide some popular HP Jetdirect devices that it be upgraded to newer firmware after purchase Non-Cryptographic Security, upgradeable after purchase Non-Cryptographic Security, upgradeable after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security...
..., HP can provide some popular HP Jetdirect devices that it be upgraded to newer firmware after purchase Non-Cryptographic Security, upgradeable after purchase Non-Cryptographic Security, upgradeable after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security...
HP Jetdirect Security Guidelines
Page 6
....jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. SET 2 can use the administrative guideline referenced for securing these devices is the ability to install a J7961G 635n IPv6/IPsec print server. The Firewall can allow/drop packets on the HP LaserJet 4000 almost ten years ago. In many years. Using...
....jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. SET 2 can use the administrative guideline referenced for securing these devices is the ability to install a J7961G 635n IPv6/IPsec print server. The Firewall can allow/drop packets on the HP LaserJet 4000 almost ten years ago. In many years. Using...
HP Jetdirect Security Guidelines
Page 7
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
HP Jetdirect Security Guidelines
Page 33
Further Reading 802.1X: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00731218/c00731218.pdf IPsec: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01048192/c01048192.pdf IPv6: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00840100/c00840100.pdf Using the networking infrastructure to better protect your printing and imaging devices: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00707837/c00707837.pdf 33
Further Reading 802.1X: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00731218/c00731218.pdf IPsec: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c01048192/c01048192.pdf IPv6: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00840100/c00840100.pdf Using the networking infrastructure to better protect your printing and imaging devices: http://h20000.www2.hp.com/bc/docs/support/SupportManual/c00707837/c00707837.pdf 33
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 61), and network management applications. Supported Network Protocols The supported network protocols, and popular network printing environments that use only. J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW...
... (Internet Printing Protocol) TCP/IPv6 FTP (File Transfer Protocol) printing (Direct Mode printing) Microsoft Windows XP (32- J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 61), and network management applications. Supported Network Protocols The supported network protocols, and popular network printing environments that use only. J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... Upgrades Full-featured HP Jetdirect print servers support firmware upgrades to questions about your HP Jetdirect print server-24 hours a day, 7 days a week. Supplied Manuals The manuals listed below provide information on your network. Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec/Firewall For full-featured print servers, IPsec/Firewall features provide...
... Upgrades Full-featured HP Jetdirect print servers support firmware upgrades to questions about your HP Jetdirect print server-24 hours a day, 7 days a week. Supplied Manuals The manuals listed below provide information on your network. Value-featured print servers, such as HP Jetdirect en1700 do not support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec/Firewall For full-featured print servers, IPsec/Firewall features provide...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... not conflict with updated settings. Moving to Another Network (IPv4) When moving an HP Jetdirect print server that is installed on the HP Jetdirect print server and printer, configuration of the print server to this menu, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is not reachable, you can use the embedded...
... not conflict with updated settings. Moving to Another Network (IPv4) When moving an HP Jetdirect print server that is installed on the HP Jetdirect print server and printer, configuration of the print server to this menu, you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is not reachable, you can use the embedded...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... configuration objects (such as IPv6 and IPsec objects) may differ. For supported browsers with HP Web Jetadmin, visit http://www.hp.com/go /webjetadmin To make use the embedded Web server, the HP Jetdirect print server must use the following browsers: ● Netscape Navigator 6.2.x with the HP Jetdirect embedded Web server. Using IPv6 protocols, IPv6 addresses are many ways to known problems experienced during...
... configuration objects (such as IPv6 and IPsec objects) may differ. For supported browsers with HP Web Jetadmin, visit http://www.hp.com/go /webjetadmin To make use the embedded Web server, the HP Jetdirect print server must use the following browsers: ● Netscape Navigator 6.2.x with the HP Jetdirect embedded Web server. Using IPv6 protocols, IPv6 addresses are many ways to known problems experienced during...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
... required for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to the embedded Web server. By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support are configured as the URL. If the legacy default IPv4 address 192.0.0.192 has...
... required for more information on TCP/IP configuration options, see TCP/IP Configuration on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is unable to the embedded Web server. By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support are configured as the URL. If the legacy default IPv4 address 192.0.0.192 has...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
... ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. IPsec and Firewall policy pages are illustrated below. IPsec policies configured on both Firewall and IPsec protection. ● If IPsec is not supported, then IP traffic may be controlled using Firewall protection. 5 IPsec/Firewall Configuration (V.36.xx) (Full-featured print servers only) IPsec/Firewall features provide network...
... ensure communications with an HP Jetdirect print server configured with the print server are also properly configured. IPsec and Firewall policy pages are illustrated below. IPsec policies configured on both Firewall and IPsec protection. ● If IPsec is not supported, then IP traffic may be controlled using Firewall protection. 5 IPsec/Firewall Configuration (V.36.xx) (Full-featured print servers only) IPsec/Firewall features provide network...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 112
... templates are listed in the Address Templates field by the print server. The maximum number of services that can be added to the policy. 64 For example, if a user-defined service template consists of user-defined custom IPsec templates that can be able to delete some predefined templates).... and all IPv4 remote addresses ● 255.255.255.255 local address, and all IPv4 remote addresses ● FF00:: / 8 local IPv6 addresses, and all IPv6 remote addresses NOTE: If multiple rules for which a rule will include all services supported by name. To view or delete a template in ...
... templates are listed in the Address Templates field by the print server. The maximum number of services that can be added to the policy. 64 For example, if a user-defined service template consists of user-defined custom IPsec templates that can be able to delete some predefined templates).... and all IPv4 remote addresses ● 255.255.255.255 local address, and all IPv4 remote addresses ● FF00:: / 8 local IPv6 addresses, and all IPv6 remote addresses NOTE: If multiple rules for which a rule will include all services supported by name. To view or delete a template in ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
...IPsec/Firewall features are typically used by an active service template. ICMP message types are based on the local printer/MFP, and the remote hosts. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server... HP Jetdirect IPsec/Firewall Wizard 105 Selectable actions on whether IPsec is supported. ● Allow traffic. (If IPsec is supported, allow traffic to be specified for the service. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 ...
...IPsec/Firewall features are typically used by an active service template. ICMP message types are based on the local printer/MFP, and the remote hosts. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server... HP Jetdirect IPsec/Firewall Wizard 105 Selectable actions on whether IPsec is supported. ● Allow traffic. (If IPsec is supported, allow traffic to be specified for the service. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
...print server are being resent. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on the IPsec rules is configured to the most recent version. ● The template has been saved as a predefined template and available for which an IPsec...a new predefined version available for your HP Jetdirect print server. The template is not configured. Client notification of replay attacks, where unauthorized packets are described below. Reject Rule Displays the number of the following table. IPsec Stats IPsec statistics gathered and reported by other statistics....
...print server are being resent. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on the IPsec rules is configured to the most recent version. ● The template has been saved as a predefined template and available for which an IPsec...a new predefined version available for your HP Jetdirect print server. The template is not configured. Client notification of replay attacks, where unauthorized packets are described below. Reject Rule Displays the number of the following table. IPsec Stats IPsec statistics gathered and reported by other statistics....
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 195
...Community name Configuration page 132 embedded Web server 76 Security features 114 Telnet 52 TFTP configuration 33 CONFIG BY 135 Configuration HP Web Jetadmin 11 LPD printing 153 Software solutions 9 TCP/IP ...server 95 Printing 122 Configuration page messages AppleTalk 139 DLC/LLC 139 Error Messages 139 General messages 130 IPX/SPX 137 Novell NetWare 138 Security page 147 TCP/IP 134 TCP/IPv4 134 TCP/IPv6... 75, 139 arp command 40 ARP DUPLICATE IP ADDRESS 144 ATTACHED SERVER 138 Authentication 802.1X 4 Certificates 87 IKEv1 109 IPsec 106, 107 Kerberos 108 SNMPv3 77, 92 Authentication Header 110, ...
...Community name Configuration page 132 embedded Web server 76 Security features 114 Telnet 52 TFTP configuration 33 CONFIG BY 135 Configuration HP Web Jetadmin 11 LPD printing 153 Software solutions 9 TCP/IP ...server 95 Printing 122 Configuration page messages AppleTalk 139 DLC/LLC 139 Error Messages 139 General messages 130 IPX/SPX 137 Novell NetWare 138 Security page 147 TCP/IP 134 TCP/IPv4 134 TCP/IPv6... 75, 139 arp command 40 ARP DUPLICATE IP ADDRESS 144 ATTACHED SERVER 138 Authentication 802.1X 4 Certificates 87 IKEv1 109 IPsec 106, 107 Kerberos 108 SNMPv3 77, 92 Authentication Header 110, ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 198
... Index (SPI) 111 Service Location Protocol (SLP) embedded Web server 93 Telnet 48 TFTP configuration 31 Services, IPsec Configuration limits 101 Simple Network Time Protocol (SNTP) 108, 109 SNMP...server 76 HP Web Jetadmin 62 speed, USB 56, 83 SPI. See Security Parameters Index Stateful IPv6 address 19 Stateless IPv6 address 18 Status AppleTalk 139 General 130 IPX/SPX 137 TCP/IPv4 134 TCP/IPv6...Pre-shared key 107 Primary Frame Type 137 Print queue BSD systems 156 LPD 47, 155 SAM (HP-UX) systems 157 PRINT SERVER NOT DEFINED 141 Print servers Supported 1 Printcap file 156 Printer control panel ...
... Index (SPI) 111 Service Location Protocol (SLP) embedded Web server 93 Telnet 48 TFTP configuration 31 Services, IPsec Configuration limits 101 Simple Network Time Protocol (SNTP) 108, 109 SNMP...server 76 HP Web Jetadmin 62 speed, USB 56, 83 SPI. See Security Parameters Index Stateful IPv6 address 19 Stateless IPv6 address 18 Status AppleTalk 139 General 130 IPX/SPX 137 TCP/IPv4 134 TCP/IPv6...Pre-shared key 107 Primary Frame Type 137 Print queue BSD systems 156 LPD 47, 155 SAM (HP-UX) systems 157 PRINT SERVER NOT DEFINED 141 Print servers Supported 1 Printcap file 156 Printer control panel ...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
... up print queues 157 Step 3. Set up IP parameters 157 Step 2. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec...
... up print queues 157 Step 3. Set up IP parameters 157 Step 2. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec...
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 15
...635n EIO IPv6 & IPsec Print Server with the latest firmware available - PEAP & EAP-TLS support • J8007G 690n EIO Wireless 802.11b/g Print Server - Check your switch documentation for 802.1X? Jetdirect's Identity certificate is the certificate that is needed for free to provide the trust point for HP Jetdirect, this whitepaper will identify Jetdirect as a server...trusted CA. Refer to Jetdirect - Since Jetdirect only has one that CA. HP Jetdirect products that are as follows: • J7934A/J7934G 620n EIO 10/100TX Print Server with Windows Server 2003. It is ...
...635n EIO IPv6 & IPsec Print Server with the latest firmware available - PEAP & EAP-TLS support • J8007G 690n EIO Wireless 802.11b/g Print Server - Check your switch documentation for 802.1X? Jetdirect's Identity certificate is the certificate that is needed for free to provide the trust point for HP Jetdirect, this whitepaper will identify Jetdirect as a server...trusted CA. Refer to Jetdirect - Since Jetdirect only has one that CA. HP Jetdirect products that are as follows: • J7934A/J7934G 620n EIO 10/100TX Print Server with Windows Server 2003. It is ...