Practical considerations for imaging and printing security
Page 6
... Wired Networks Provides access control to -clunk performance that rivals unsecured protocols, and supports the IPsec implementations available in all current major operating systems, including Windows, Unix®, and Linux®. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to the Ethernet network. Secure IPP...
... Wired Networks Provides access control to -clunk performance that rivals unsecured protocols, and supports the IPsec implementations available in all current major operating systems, including Windows, Unix®, and Linux®. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to the Ethernet network. Secure IPP...
HP Jetdirect Security Guidelines
Page 5
... installed on the formatter for certain printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase...
... installed on the formatter for certain printers/MFP devices) J7982E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for certain printers/MFP devices) J7997G 630n EIO 10/100/1000 Print Server J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Security Features Non-Cryptographic Security, not upgradeable to newer firmware after purchase...
HP Jetdirect Security Guidelines
Page 6
... located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. This flexibility will need to install a J7961G 635n IPv6/IPsec print server. As a reminder, these devices... is the ability to be used. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. SET 3 can be...
... located here: http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj07576 • SET 3: The 630n and Embedded Jetdirect (J7982E, J7987E, J7991E, and J7992E) models. This flexibility will need to install a J7961G 635n IPv6/IPsec print server. As a reminder, these devices... is the ability to be used. These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. SET 3 can be...
HP Jetdirect Security Guidelines
Page 7
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
.../100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n EIO 10/100 Print Server J7960A/J7960G 625n EIO 10/100/1000 Print Server J7961A/J7961G 635n EIO 10/100/1000 IPv6/IPsec Print Server Firmware Version...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 5
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
... 1 Introducing the HP Jetdirect Print Server Supported Print Servers ...1 Supported Network Protocols ...2 Security Protocols ...4 SNMP (IP and IPX) ...4 HTTPS ...4 Authentication ...4 EAP/802.1X Server-Based Authentication 4 IPsec/Firewall ...5 Supplied Manuals ...5 HP Support ...5 HP Online Support ...5 Firmware Upgrades ...5 Firmware Installation Tools 6 HP Support By Phone ...6 Product Registration ...6 Product Accessibility ...7 2 HP Software Solutions Summary HP Install Network Printer Wizard (Windows 10 Requirements ...10 HP Jetdirect Printer Installer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 8
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
...128 Configuration Page Format 128 Configuration Page Messages 129 HP Jetdirect Configuration/General Information 129 Security Settings 131 Network Statistics 133 TCP/IP Protocol Information 133 IPv4 Section 134 IPv6 Section 136 IPX/SPX Protocol Information 137 Novell/NetWare...LPD 154 vi ENWW Specify IPsec/Firewall Template 106 Create IPsec Template 106 IPsec Protocols (Manual Keys 111 Rule Summary ...112 Configuring Windows Systems ...112 6 Security Features (V.36.xx) Using Security Features ...116 7 Troubleshooting the HP Jetdirect Print Server Resetting to Factory Defaults ......
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 12
... 4 and IPv 6) only, with IPv6 client support. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support use those protocols, are listed below...Configuration on page 17), embedded Web server (see "Firmware Upgrades on page 61), and network management applications. J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page...
... 4 and IPv 6) only, with IPv6 client support. HP Jetdirect print server support for IPsec (Internet Protocol security) depends on the print server and the printer/MFP in which it is installed. 2 HP embedded Jetdirect print server support for HP support use those protocols, are listed below...Configuration on page 17), embedded Web server (see "Firmware Upgrades on page 61), and network management applications. J7988G (en1700)3 J7993E 2 Chapter 1 Introducing the HP Jetdirect Print Server ENWW J7961G (635n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 15
... the embedded Web server. To help you configure the print server for the applicable HP Jetdirect product models. The HP Web site: http://www.hp.com/support/net_printing is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec and Firewall capabilities depend on the print server over your print server model, firmware...
... the embedded Web server. To help you configure the print server for the applicable HP Jetdirect product models. The HP Web site: http://www.hp.com/support/net_printing is installed. ● Full-featured print servers and printers/MFPs that support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec and Firewall capabilities depend on the print server over your print server model, firmware...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 69
... network configuration parameters that you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is installed on the new network. Depending on the HP Jetdirect print server and printer, configuration of the print server to Embedded Web Server (V.36.xx) on the new network, or erase the current IP address and...
... network configuration parameters that you may change the IP address of selected IPv4/IPv6 and IPsec networking parameters through the control panel is installed on the new network. Depending on the HP Jetdirect print server and printer, configuration of the print server to Embedded Web Server (V.36.xx) on the new network, or erase the current IP address and...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 72
..., see TCP/IP Configuration on the print server. In general, the embedded Web server can be used with Web browsers that you do not use a compatible Web browser. Using HP Web Jetadmin, you can automatically configure IP parameters over IPv6 protocols. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Viewing the Embedded Web...
..., see TCP/IP Configuration on the print server. In general, the embedded Web server can be used with Web browsers that you do not use a compatible Web browser. Using HP Web Jetadmin, you can automatically configure IP parameters over IPv6 protocols. However, Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) may differ. Viewing the Embedded Web...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 73
...the IP address or fully qualified domain name (FQDN) of the print server as a secure site, using an X.509v3-compliant certificate installed on the print server for initial access. By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support are configured as the URL. If the legacy default IPv4 address... in the range 169.254.1.0 to proceed. When powered on your system documentation. The IP address configured on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is typically enclosed in this example, printer1).
...the IP address or fully qualified domain name (FQDN) of the print server as a secure site, using an X.509v3-compliant certificate installed on the print server for initial access. By factory default, HP Jetdirect print servers and printers/MFPs with IPsec support are configured as the URL. If the legacy default IPv4 address... in the range 169.254.1.0 to proceed. When powered on your system documentation. The IP address configured on , an HP Jetdirect print server that support direct IPv6 address entries, an IPv6 address is typically enclosed in this example, printer1).
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 107
... the additional security benefits of IP addresses that support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec and Firewall policy pages are illustrated below. IPsec policies configured on the print server until you must be compatible; ENWW 97 After a... be allowed access. For IPsec/Firewall operation on both Firewall and IPsec protection. ● If IPsec is greatly enhanced. ● Print servers and printers/MFPs that will fail. NOTE: To ensure communications with an HP Jetdirect print server configured with an IPsec policy, be sure that computer...
... the additional security benefits of IP addresses that support IPsec may control IP traffic using both IPv4 and IPv6 networks. IPsec and Firewall policy pages are illustrated below. IPsec policies configured on the print server until you must be compatible; ENWW 97 After a... be allowed access. For IPsec/Firewall operation on both Firewall and IPsec protection. ● If IPsec is greatly enhanced. ● Print servers and printers/MFPs that will fail. NOTE: To ensure communications with an HP Jetdirect print server configured with an IPsec policy, be sure that computer...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 115
...Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● For TCP or UDP, you must specify an ICMP message type for the service. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server or device. ... ● For ICMPv4 or ICMPv6, you will be specified for use ports; NOTE: ICMP messages are not configured; ENWW HP Jetdirect IPsec/Firewall Wizard 105 Selectable actions on this rule, select an action for error, control or information messages between network hosts. ICMP...
...Protocol for IPv4/IPv6 networks), and IGMPv2 (Internet Group Management Protocol version 2). ● For TCP or UDP, you must specify an ICMP message type for the service. Service Type Specify the service type: ● Printer/MFP Service (default): A local service on the HP Jetdirect print server or device. ... ● For ICMPv4 or ICMPv6, you will be specified for use ports; NOTE: ICMP messages are not configured; ENWW HP Jetdirect IPsec/Firewall Wizard 105 Selectable actions on this rule, select an action for error, control or information messages between network hosts. ICMP...
HP Jetdirect Print Server Administrator's Guide (Firmware V.36)
Page 159
...Jetdirect Firmware You should upgrade the Jetdirect firmware to drop all non-IPsec traffic, the number of fragmented packets that was created using a prior Jetdirect firmware version has been detected. AH MAC Errors Displays the number of rejected IPsec packets. Client notification of packets received for your HP Jetdirect print server...displayed. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on your use , but it may have been replaced by the print server. Drop Rule If the default IPsec rule is in the following states: ● The template ...
...Jetdirect Firmware You should upgrade the Jetdirect firmware to drop all non-IPsec traffic, the number of fragmented packets that was created using a prior Jetdirect firmware version has been detected. AH MAC Errors Displays the number of rejected IPsec packets. Client notification of packets received for your HP Jetdirect print server...displayed. Local IP Addresses This section lists the IPv4 and IPv6 addresses configured on your use , but it may have been replaced by the print server. Drop Rule If the default IPsec rule is in the following states: ● The template ...
HP Jetdirect Print Servers - Administrator's Guide
Page 9
...to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from ...print queues 157 Step 3. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec...
...to configure print queues (HP-UX systems 159 Print a test file 160 LPD on Windows 2000/Server 2003 systems 160 Install TCP/IP software 160 Configure a network printer for Windows 2000/Server 2003 systems 161 Verify the configuration 162 Print from ...print queues 157 Step 3. Network Statistics 137 TCP/IP protocol information 137 IPv4 section 138 IPv6 section 140 IPX/SPX protocol information 140 Novell/NetWare parameters 141 AppleTalk protocol information 142 DLC/LLC protocol information 143 Error messages ...143 HP Jetdirect Security page ...149 Security settings ...150 IPsec...
HP Jetdirect Print Servers - Administrator's Guide
Page 12
...). J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. HP Jetdirect print server support for HP support use only. For firmware updates, see Embedded Web server (V.38.xx) on page 5. To view the HP Jetdirect print server product number and installed firmware version, use those protocols. See Table 1-2 Supported network protocols on the system.) J7961G (635n) LPR/LPD...
...). J8007G (690n) Server 2003, Vista. (Requires HP IPv6/IPv4 port monitor software running on page 2. HP Jetdirect print server support for HP support use only. For firmware updates, see Embedded Web server (V.38.xx) on page 5. To view the HP Jetdirect print server product number and installed firmware version, use those protocols. See Table 1-2 Supported network protocols on the system.) J7961G (635n) LPR/LPD...
HP Jetdirect Print Servers - Administrator's Guide
Page 14
...key. IPsec/Firewall IPsec/Firewall features provide network-layer security on X.509v3-compliant digital certificates for client authentication. Full-featured HP Jetdirect print servers support ...IPv6 networks. When using an 802.1X connection, the print server supports EAP with the extensible authentication protocol (EAP) on client authentication results. A device that uses passwords for mutual authentication (the client and the server authenticate each wireless device. Authentication EAP/802.1X server-based authentication As a network client, HP Jetdirect full-featured print servers...
...key. IPsec/Firewall IPsec/Firewall features provide network-layer security on X.509v3-compliant digital certificates for client authentication. Full-featured HP Jetdirect print servers support ...IPv6 networks. When using an 802.1X connection, the print server supports EAP with the extensible authentication protocol (EAP) on client authentication results. A device that uses passwords for mutual authentication (the client and the server authenticate each wireless device. Authentication EAP/802.1X server-based authentication As a network client, HP Jetdirect full-featured print servers...
HP Jetdirect Print Servers - Administrator's Guide
Page 68
... IP address of specific IPv4/IPv6 and IPsec networking parameters depends on the HP Jetdirect print server and printer. If the print server was manually set basic network parameters. For instructions about using BOOTP, DHCP, or RARP, update the appropriate system files. You might configure the print server to use the embedded Web server on the HP Jetdirect print server to configure or view IPv4...
... IP address of specific IPv4/IPv6 and IPsec networking parameters depends on the HP Jetdirect print server and printer. If the print server was manually set basic network parameters. For instructions about using BOOTP, DHCP, or RARP, update the appropriate system files. You might configure the print server to use the embedded Web server on the HP Jetdirect print server to configure or view IPv4...
HP Jetdirect Print Servers - Administrator's Guide
Page 73
... steps: 1. Using IPv4 protocols, you can view HP Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) over IPv6 protocols. To use the improved security features, HP Web Jetadmin version 8.0 or greater is recommended for more information on TCP/IP configuration options, see TCP/IP configuration on the print server, although manual configuration is available. See TCP...
... steps: 1. Using IPv4 protocols, you can view HP Jetdirect MIB configuration objects (such as IPv6 and IPsec objects) over IPv6 protocols. To use the improved security features, HP Web Jetadmin version 8.0 or greater is recommended for more information on TCP/IP configuration options, see TCP/IP configuration on the print server, although manual configuration is available. See TCP...
HP Jetdirect Print Servers - How to Use 802.1X on HP Jetdirect Print Servers
Page 15
...supported. PEAP & EAP-TLS support • J7942A/J7942G en3700 USB External Print Server with the latest firmware available - All that the CA certificate on the protocol being used . HP Jetdirect products that support 802.1X are sent to note that is needed for...EAP-TLS support • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with the latest firmware available - PEAP & EAP-TLS support • J8007G 690n EIO Wireless 802.11b/g Print Server - Microsoft's IAS comes with Windows Server 2003. It is important to Jetdirect - Jetdirect can store one Identity certificate and one ...
...supported. PEAP & EAP-TLS support • J7942A/J7942G en3700 USB External Print Server with the latest firmware available - All that the CA certificate on the protocol being used . HP Jetdirect products that support 802.1X are sent to note that is needed for...EAP-TLS support • J7961A/J7961G 635n EIO IPv6 & IPsec Print Server with the latest firmware available - PEAP & EAP-TLS support • J8007G 690n EIO Wireless 802.11b/g Print Server - Microsoft's IAS comes with Windows Server 2003. It is important to Jetdirect - Jetdirect can store one Identity certificate and one ...