Practical considerations for imaging and printing security
Page 6
... for strong authentication, confidentiality, and integrity of communications, and can prevent unauthorized users from attaching devices to provide fleet management of HP imaging and printing devices. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that network communications between users, administrators, the imaging and...
... for strong authentication, confidentiality, and integrity of communications, and can prevent unauthorized users from attaching devices to provide fleet management of HP imaging and printing devices. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that network communications between users, administrators, the imaging and...
HP Jetdirect Security Guidelines
Page 5
... some popular HP Jetdirect devices that are available for customers to a newer model. Should a customer choose to newer firmware after purchase Non-Cryptographic Security, upgradeable after purchase Non-Cryptographic Security, upgradeable after purchase SSL/TLS for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security...
... some popular HP Jetdirect devices that are available for customers to a newer model. Should a customer choose to newer firmware after purchase Non-Cryptographic Security, upgradeable after purchase Non-Cryptographic Security, upgradeable after purchase SSL/TLS for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security...
HP Jetdirect Security Guidelines
Page 6
... sold today. As a reminder, these devices is the ability to install a J7961G 635n IPv6/IPsec print server. These models have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that cannot be addressing some public information available about vulnerabilities or attacks against HP Jetdirect and some ways to counteract those devices on your windows open. This flexibility...
... sold today. As a reminder, these devices is the ability to install a J7961G 635n IPv6/IPsec print server. These models have been disabled (e.g., IPX/SPX, AppleTalk) • Mark any product that cannot be addressing some public information available about vulnerabilities or attacks against HP Jetdirect and some ways to counteract those devices on your windows open. This flexibility...
HP Jetdirect Security Guidelines
Page 7
.../100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - Now that exists on the HP Jetdirect device is...
.../100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version V.33.14/V.33.15 K.08.49 K.08.49 G.08.49 G.08.49 G.08.49 L.25.57 R.25.57 H.08.60 J.08.60 J.08.60 V.28.22 V.29.20 V.29.29 V.36.11 Table 4 - Now that exists on the HP Jetdirect device is...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
...IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ...118 Example: Cold Reset Using the Service Menu 119 To Disable a Jetdirect Embedded Print Server... Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
.../MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support use those protocols, are listed below. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on page 5". Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support. and 64-bit). J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on...
.../MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support use those protocols, are listed below. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on page 5". Value-featured support includes TCP/IP (IPv 4 and IPv 6) only, with IPv6 client support. and 64-bit). J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... that do not support these features. HP Support HP Online Support Click your print server model, firmware upgrade files may control IP traffic using both IPv4 and IPv6 networks. If available for answers to questions about your HP Jetdirect print server-24 hours a day, 7 days a week. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec/Firewall operation, a browser-based wizard...
... that do not support these features. HP Support HP Online Support Click your print server model, firmware upgrade files may control IP traffic using both IPv4 and IPv6 networks. If available for answers to questions about your HP Jetdirect print server-24 hours a day, 7 days a week. installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for IPsec/Firewall operation, a browser-based wizard...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... protocols and set include the following (see HP Jetdirect Control Panel Menus (V.36.xx) on the HP Jetdirect print server and printer, configuration of selected IPv4/IPv6 and IPsec networking parameters through the control panel is not reachable, you may change the IP address of the print server to this chapter. When accessing the HP Jetdirect menu from the printer's control panel...
... protocols and set include the following (see HP Jetdirect Control Panel Menus (V.36.xx) on the HP Jetdirect print server and printer, configuration of selected IPv4/IPv6 and IPsec networking parameters through the control panel is not reachable, you may change the IP address of the print server to this chapter. When accessing the HP Jetdirect menu from the printer's control panel...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
... can use the embedded Web server, the HP Jetdirect print server must use the following browsers: ● Microsoft Internet Explorer 5.0 or greater ● Netscape Navigator 6.0 or greater ● Mozilla Firefox 1.x or greater Browser Exceptions Due to configure an IPv4 address on page 17. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Viewing the...
... can use the embedded Web server, the HP Jetdirect print server must use the following browsers: ● Microsoft Internet Explorer 5.0 or greater ● Netscape Navigator 6.0 or greater ● Mozilla Firefox 1.x or greater Browser Exceptions Due to configure an IPv4 address on page 17. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Viewing the...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
...print server for example, printer1.support.hp.com), enter the host name (in the range 169.254.1.0 to the print server before you must temporarily set up your computer with IPsec support are configured as the URL. Your system may be determined by inspecting the Jetdirect... IP address for the print server. the "arp" and "ping" commands, HP Web Jetadmin or other management software. The IP address configured on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is required for more information. See your print server can gain access to ...
...print server for example, printer1.support.hp.com), enter the host name (in the range 169.254.1.0 to the print server before you must temporarily set up your computer with IPsec support are configured as the URL. Your system may be determined by inspecting the Jetdirect... IP address for the print server. the "arp" and "ping" commands, HP Web Jetadmin or other management software. The IP address configured on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is required for more information. See your print server can gain access to ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
... client-server authentication or HTTPS Web browsing). But because IPsec provides security at the transport layer for secure client-server applications (for secure host-to specified IP traffic. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also...IPv4 and IPv6 networks. ENWW 97 IPsec policies configured on both Firewall and IPsec protection. ● If IPsec is not applied on the print server, you click Apply button. For IPsec/Firewall operation on the print server until you must be compatible; Typical IPsec and ...
... client-server authentication or HTTPS Web browsing). But because IPsec provides security at the transport layer for secure client-server applications (for secure host-to specified IP traffic. NOTE: To ensure communications with an HP Jetdirect print server configured with the print server are also...IPv4 and IPv6 networks. ENWW 97 IPsec policies configured on both Firewall and IPsec protection. ● If IPsec is not applied on the print server, you click Apply button. For IPsec/Firewall operation on the print server until you must be compatible; Typical IPsec and ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
... custom service from the list. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server or device. ● Remote Service: A service on the service, select Port Range or Specific Port, then enter the port range... to be applied to pass without IPsec protection.) ● Drop traffic. Depending on a remote host. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● For TCP ...
... custom service from the list. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server or device. ● Remote Service: A service on the service, select Port Range or Specific Port, then enter the port range... to be applied to pass without IPsec protection.) ● Drop traffic. Depending on a remote host. Table 5-6 Manage Custom Services page (continued) Item Description (Internet Control Message Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● For TCP ...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
...IPsec traffic, the number of Authentication Header (AH) Message Authentication Code (MAC) errors. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on your use , but it may have been replaced by the print server are not counted by the print server... notification of packets received for your HP Jetdirect print server. Reject Rule Displays the number of packets dropped that is, the message received is not configured. Generic Drops Displays the number of rejected IPsec packets. IPsec Stats IPsec statistics gathered and reported by a new...
...IPsec traffic, the number of Authentication Header (AH) Message Authentication Code (MAC) errors. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on your use , but it may have been replaced by the print server are not counted by the print server... notification of packets received for your HP Jetdirect print server. Reject Rule Displays the number of packets dropped that is, the message received is not configured. Generic Drops Displays the number of rejected IPsec packets. IPsec Stats IPsec statistics gathered and reported by a new...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
... SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients ...143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 Requirements...
... SAM to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from Windows clients ...143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec Error Log ...152 Local IP addresses ...152 IPsec Statistics ...152 IKE Stats ...153 IPsec Rules ...153 IPsec Security Associations (SA) table 153 Available Network Services 154 Appendix A LPD printing About LPD ...156 Requirements...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
For firmware updates, see Embedded Web server (V.38.xx) on page 5. HP Jetdirect print server support for Internet protocol security (IPsec) depends on the print server and the printer/MFP in which it is installed. 2 Full-...HP Jetdirect configuration pages on page 129), Telnet (see TCP/IP configuration on page 15), embedded Web server (see Firmware upgrades on page 61), or the network management applications. See Table 1-2 Supported network protocols on the system.) J7961G (635n) LPR/LPD RFC 1179 compliant systems with IPv6 client support IPP systems with limited printing...
For firmware updates, see Embedded Web server (V.38.xx) on page 5. HP Jetdirect print server support for Internet protocol security (IPsec) depends on the print server and the printer/MFP in which it is installed. 2 Full-...HP Jetdirect configuration pages on page 129), Telnet (see TCP/IP configuration on page 15), embedded Web server (see Firmware upgrades on page 61), or the network management applications. See Table 1-2 Supported network protocols on the system.) J7961G (635n) LPR/LPD RFC 1179 compliant systems with IPv6 client support IPP systems with limited printing...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
... (RADIUS, RFC 2138) server. IPsec/Firewall IPsec/Firewall features provide network-layer security on page 61. The network infrastructure device that must be configured on an IEEE 802.1X network. Dynamic WPA encryption protocols are used . A firewall provides simple control of both IPv4 and IPv6 networks. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols...
... (RADIUS, RFC 2138) server. IPsec/Firewall IPsec/Firewall features provide network-layer security on page 61. The network infrastructure device that must be configured on an IEEE 802.1X network. Dynamic WPA encryption protocols are used . A firewall provides simple control of both IPv4 and IPv6 networks. Wireless print server authentication HP Jetdirect wired/wireless print servers support several available protocols...
HP Jetdirect Print Servers - Administrator's Guide
Page 68
... that network. Move to another network (IPv4) When moving an HP Jetdirect print server that is not reachable, you can enable or disable network protocols and set basic network parameters. You might configure the print server to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on page 117. For more information, see your...
... that network. Move to another network (IPv4) When moving an HP Jetdirect print server that is not reachable, you can enable or disable network protocols and set basic network parameters. You might configure the print server to change the IP address of specific IPv4/IPv6 and IPsec networking parameters depends on page 117. For more information, see your...
HP Jetdirect Print Servers - Administrator's Guide
Page 111
...following table. One for all IPv4 addresses, and another for all IPv6 addresses. ● All non link local IPv6 Results in four (4) address template rules: ◦ :: to ...addresses and services. Depending on whether IPsec is not protected by the print server and device, the following illustration. See the following actions are ...traffic to be protected with IPsec2 ... ... Figure 5-3 Use the IPsec Wizard to configure rules HP Jetdirect IPsec/Firewall Policy Use the IPsec/Firewall Wizard to Configure Each Rule { IPsec/Firewall Rules Rule 1 Step 1, select: Addresses1 Step 2, select...
...following table. One for all IPv4 addresses, and another for all IPv6 addresses. ● All non link local IPv6 Results in four (4) address template rules: ◦ :: to ...addresses and services. Depending on whether IPsec is not protected by the print server and device, the following illustration. See the following actions are ...traffic to be protected with IPsec2 ... ... Figure 5-3 Use the IPsec Wizard to configure rules HP Jetdirect IPsec/Firewall Policy Use the IPsec/Firewall Wizard to Configure Each Rule { IPsec/Firewall Rules Rule 1 Step 1, select: Addresses1 Step 2, select...
HP Jetdirect Print Servers - Practical IPv6 Deployment for Printing and Imaging Devices
Page 1
... ushered in HP Jetdirect...9 IPv6 Link Local Islands ...11 What IPv6 Address Range Should We Use 15 IPv6 Stateless Automatic Address Configuration (SLAAC 20 Preparing the Intranet for IPv6 ...24 DNS Zone Options for the Intranet 27 The IPv6 Only Subnets...27 IPv6 Discovery, Attacks, and Mitigations 28 HP Jetdirect Security Options with a server platform and fully supported IPv4, IPv6, and IPsec solutions...
... ushered in HP Jetdirect...9 IPv6 Link Local Islands ...11 What IPv6 Address Range Should We Use 15 IPv6 Stateless Automatic Address Configuration (SLAAC 20 Preparing the Intranet for IPv6 ...24 DNS Zone Options for the Intranet 27 The IPv6 Only Subnets...27 IPv6 Discovery, Attacks, and Mitigations 28 HP Jetdirect Security Options with a server platform and fully supported IPv4, IPv6, and IPsec solutions...