Practical considerations for imaging and printing security
Page 1
... Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common...
... Printing Device 5 MFP walk-up authentication ...5 Network printing authentication ...5 Physical document access control 5 HP Secure Erase ...6 Vulnerabilities, viruses, and worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common...
HP Jetdirect Security Guidelines
Page 1
.... Resources such as configuration recommendations. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
.... Resources such as configuration recommendations. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
HP Jetdirect Security Guidelines
Page 2
... of printers increased and the need of thousands, and perhaps a few years may in the same sentence. HP Jetdirect was to have been in intranet networking connectivity: TCP/IP and Ethernet. Protocol suites such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely... question. At one of transporting frames had their firmware updated or their configuration changed. Customers are new to security and secure configurations, it is important to remember that this growth period in network printing, functionality within HP Jetdirect was designed to be broken later today. In ...
... of printers increased and the need of thousands, and perhaps a few years may in the same sentence. HP Jetdirect was to have been in intranet networking connectivity: TCP/IP and Ethernet. Protocol suites such as AppleTalk, DLC/LLC, and IPX/SPX were deployed widely... question. At one of transporting frames had their firmware updated or their configuration changed. Customers are new to security and secure configurations, it is important to remember that this growth period in network printing, functionality within HP Jetdirect was designed to be broken later today. In ...
HP Jetdirect Security Guidelines
Page 4
... have to update the firmware on your HP Jetdirect products if you not ...HP Jetdirect? HP Jetdirect Aging Description Microsoft Windows for Workgroups 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect...network, an administrator may be sure to some popular HP Jetdirect products are still working. Microsoft provides many of comparison, some network...
... have to update the firmware on your HP Jetdirect products if you not ...HP Jetdirect? HP Jetdirect Aging Description Microsoft Windows for Workgroups 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect...network, an administrator may be sure to some popular HP Jetdirect products are still working. Microsoft provides many of comparison, some network...
HP Jetdirect Security Guidelines
Page 5
...firmware after purchase Non-Cryptographic Security, upgradeable after purchase Non-Cryptographic Security, upgradeable after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for Management, SNMPv3, 802.1X PEAP. HP Jetdirect Models In Table 3 - HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n... 10Mbps EIO Print server J3113A 600n 10/100 EIO...
...firmware after purchase Non-Cryptographic Security, upgradeable after purchase Non-Cryptographic Security, upgradeable after purchase SSL/TLS for Management, SNMPv3 SSL/TLS for Management, SNMPv3, 802.1X PEAP. HP Jetdirect Models In Table 3 - HP Jetdirect J4100A 400n 10/100 MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n... 10Mbps EIO Print server J3113A 600n 10/100 EIO...
HP Jetdirect Security Guidelines
Page 6
...referenced for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to the latest firmware. • An Embedded Web Server (EWS) password has been specified • ...the EWS for HP Jetdirect, four different administrative guidelines will come from the four main HP Jetdirect product lines, referred to lock the front door and leave your network before securing one ...510x, 400n, 600n models. Printers and MFPs with a new external parallel port print server like the 300X will automatically indicate which devices need to be firmware upgraded to ...
...referenced for many cases, one must "lock down" several things before upgrading all HP Jetdirect firmware to the latest firmware. • An Embedded Web Server (EWS) password has been specified • ...the EWS for HP Jetdirect, four different administrative guidelines will come from the four main HP Jetdirect product lines, referred to lock the front door and leave your network before securing one ...510x, 400n, 600n models. Printers and MFPs with a new external parallel port print server like the 300X will automatically indicate which devices need to be firmware upgraded to ...
HP Jetdirect Security Guidelines
Page 7
... what we've learned about a print protocol that has some options, presented in the networking world, there is a potential for sending print data to a printer. There isn't ... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100...Table 4 - The most common ones being misused? • A guideline to popular HP Jetdirect devices and the firmware they should be running as of August of 2007 is shown in it had been delivered...
... what we've learned about a print protocol that has some options, presented in the networking world, there is a potential for sending print data to a printer. There isn't ... 4: HP Jetdirect Product Number J7949E Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100...Table 4 - The most common ones being misused? • A guideline to popular HP Jetdirect devices and the firmware they should be running as of August of 2007 is shown in it had been delivered...
HP Jetdirect Security Guidelines
Page 9
... facilitates reports on these devices to SNMPv3. HP Jetdirect Hacks: Firmware Upgrade A nice overview of an upgrade programming failure (due to properly avoid MITM attacks. These applications use SNMPv3 automatically. Also, consider migrating to something new. In case of the various methods used by a trusted CA to a network outage, client lockup, printer powered down...
... facilitates reports on these devices to SNMPv3. HP Jetdirect Hacks: Firmware Upgrade A nice overview of an upgrade programming failure (due to properly avoid MITM attacks. These applications use SNMPv3 automatically. Also, consider migrating to something new. In case of the various methods used by a trusted CA to a network outage, client lockup, printer powered down...
HP Jetdirect Security Guidelines
Page 10
... specifying a good password. These tools often claim to block PJL commands. However, as we have discussed HP Jetdirect security primarily. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that the MITM node has a copy of a text document that destination. These attacks...an FTP client and an FTP server, it can be configured to a printer. Active attacks are also used to force network infrastructure equipment to avoid plain-text transmission of the password, FTP upgrades are analogously similar to using other applications without having...
... specifying a good password. These tools often claim to block PJL commands. However, as we have discussed HP Jetdirect security primarily. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that the MITM node has a copy of a text document that destination. These attacks...an FTP client and an FTP server, it can be configured to a printer. Active attacks are also used to force network infrastructure equipment to avoid plain-text transmission of the password, FTP upgrades are analogously similar to using other applications without having...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 8
...) q Linux (RedHat and SuSE) Note If not supplied with this guide support the following HP JetDirect print servers with firmware version x.08.03 or later. q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX/SPX, DLC/LLC, and AppleTalk protocols. In...
...) q Linux (RedHat and SuSE) Note If not supplied with this guide support the following HP JetDirect print servers with firmware version x.08.03 or later. q HP JetDirect 600N/400N internal print servers q HP JetDirect 500X/300X external print servers Supported Networks HP JetDirect print servers support a variety of network protocol suites, including TCP/IP, IPX/SPX, DLC/LLC, and AppleTalk protocols. In...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 12
... NT 4.0 NetWare 3.x, 4.x, 5.0 Install a single network printer on a peer-to-peer or client-server network Simple printer installation Runs from CD-ROM More information: http://www.hp.com/ support/net_printing HP JetDirect Printer Installer for UNIX HP-UX 10.10, 10.20, 11.0, 11.10...installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management...
... NT 4.0 NetWare 3.x, 4.x, 5.0 Install a single network printer on a peer-to-peer or client-server network Simple printer installation Runs from CD-ROM More information: http://www.hp.com/ support/net_printing HP JetDirect Printer Installer for UNIX HP-UX 10.10, 10.20, 11.0, 11.10...installation, configuration, and management of HP JetDirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers Alerts and consumables management Remote firmware upgrades for HP JetDirect print servers HP's preferred solution for ongoing management...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 13
... Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX Frees up user licenses Allows disabling of SAPs to reduce network traffic For IPX printing, requires HP JetDirect firmware version X.03.06 or later More information: http://www.hp.com/ support/net_printing HP LaserJet Utility for NT (DLC/LLC) Windows NT...
... Print Services (NDPS) Allows automatic discovery and installation of HP JetDirect-connected printers into NDPS via IPX Frees up user licenses Allows disabling of SAPs to reduce network traffic For IPX printing, requires HP JetDirect firmware version X.03.06 or later More information: http://www.hp.com/ support/net_printing HP LaserJet Utility for NT (DLC/LLC) Windows NT...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 16
...path requests, the network administrator must configure the firewall to any HP JetDirect-connected printer over the Internet. Removing HP Web JetAdmin Software To remove HP Web JetAdmin software from your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary... system to accept incoming IPP requests. Security features available in the software are currently limited. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Windows NT 4.0 For Windows NT 4.0,...
...path requests, the network administrator must configure the firewall to any HP JetDirect-connected printer over the Internet. Removing HP Web JetAdmin Software To remove HP Web JetAdmin software from your web server, use the HP Internet Printer Connection software. 10 HP Software Solutions Summary... system to accept incoming IPP requests. Security features available in the software are currently limited. Internet Printer Connection Software HP JetDirect print servers (firmware version x.07.16 or later) support the Internet Printing Protocol (IPP). Windows NT 4.0 For Windows NT 4.0,...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 19
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
System Requirements q Computer running Microsoft Windows NT 4.0 (Intel based) or Windows 2000 q IPP-enabled HP JetDirect print server (firmware must be at revision x.07.16 or later) Supported Browsers Windows NT q Microsoft Internet Explorer 4.0 with SP1 or later q Netscape Navigator 4.06 or later Windows 2000 q Microsoft Internet Explorer 5 Supported Proxies q Web proxy with support for HTTP v1.1 or later (may not be needed if printing over an intranet) EN HP Software Solutions Summary 13
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 49
...q Windows NT/2000 or UNIX system configured for the arp command. Depending on the same network segment as Telnet, embedded web server, or HP Web JetAdmin software) to configure other tools (such as the HP JetDirect print server. q From a DOS prompt (Windows NT/2000): arp -s ping q From...made must be required for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on a label attached to HP JetDirect external print servers) Note On some systems, ...
...q Windows NT/2000 or UNIX system configured for the arp command. Depending on the same network segment as Telnet, embedded web server, or HP Web JetAdmin software) to configure other tools (such as the HP JetDirect print server. q From a DOS prompt (Windows NT/2000): arp -s ping q From...made must be required for TCP/IP operation q HP JetDirect firmware version x.08.03 or later q The LAN hardware (MAC) address of the HP JetDirect print server (specified on an HP JetDirect configuration page, or on a label attached to HP JetDirect external print servers) Note On some systems, ...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 81
.../IP client systems with FTP that complies with firmware version x.08.03 or later. In an FTP printing session, the client connects and sends a print file to the HP JetDirect FTP server which in turn passes the print file to an HP JetDirect-connected printer. EN 75 Note For the most... recent list of tested systems, visit the HP Customer Care Online at www.hp.com/support/net_printing. 5 FTP Printing Introduction FTP...
.../IP client systems with FTP that complies with firmware version x.08.03 or later. In an FTP printing session, the client connects and sends a print file to the HP JetDirect FTP server which in turn passes the print file to an HP JetDirect-connected printer. EN 75 Note For the most... recent list of tested systems, visit the HP Customer Care Online at www.hp.com/support/net_printing. 5 FTP Printing Introduction FTP...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 84
... server will display all available ports, with multiple ports will allow any user name. HP JetDirect external print servers with Port1 the default port. The default is successful, a message "230...an FTP printing session. 78 FTP Printing EN If login is the client's login name. In addition, the available HP JetDirect ports for a login name and password. To change ports, use the FTP cd (change directory) command. Ending the... for printing will be displayed. After a successful connection, the user is successful, the HP JetDirect model and firmware version will be displayed.
... server will display all available ports, with multiple ports will allow any user name. HP JetDirect external print servers with Port1 the default port. The default is successful, a message "230...an FTP printing session. 78 FTP Printing EN If login is the client's login name. In addition, the available HP JetDirect ports for a login name and password. To change ports, use the FTP cd (change directory) command. Ending the... for printing will be displayed. After a successful connection, the user is successful, the HP JetDirect model and firmware version will be displayed.
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 109
...2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type of each configuration page is locking onto the wrong frame type, that multiple frames are using the same network number, and more. Novell NetWare status information (Table 7.1) ... network statistics. Understanding the Ethernet and Token Ring Configuration Pages (External Print Servers) This section describes the Ethernet/802.3 and Token Ring/802.5 configuration page for HP JetDirect external print servers. EN Troubleshooting the HP JetDirect Print Server 103 HP JetDirect ...
...2 3 4 Description Troubleshooting Information Environment information (Table 7.5) Firmware revision number, type of each configuration page is locking onto the wrong frame type, that multiple frames are using the same network number, and more. Novell NetWare status information (Table 7.1) ... network statistics. Understanding the Ethernet and Token Ring Configuration Pages (External Print Servers) This section describes the Ethernet/802.3 and Token Ring/802.5 configuration page for HP JetDirect external print servers. EN Troubleshooting the HP JetDirect Print Server 103 HP JetDirect ...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 124
... address for damaged cables. Table 7.5 General HP JetDirect Messages (4 of 15) Message Description FIRMWARE REVISION: X.XX.XX The firmware revision number of the HP JetDirect print server currently installed in the Frame Status (FS) field. FS SET ERRORS RCVD: Total number of Token Ring frames with your network. HARD ERROR The HP JetDirect print server is an invalid subnet...
... address for damaged cables. Table 7.5 General HP JetDirect Messages (4 of 15) Message Description FIRMWARE REVISION: X.XX.XX The firmware revision number of the HP JetDirect print server currently installed in the Frame Status (FS) field. FS SET ERRORS RCVD: Total number of Token Ring frames with your network. HARD ERROR The HP JetDirect print server is an invalid subnet...
HP JetDirect Print Servers 600N/400N/500X/300X Administrator's Guide - 5969-3521
Page 133
... server or file server is running and that servers are functioning correctly. This may appear after being configured. The HP JetDirect print server was unable to find the NetWare print server (Remote Printer mode) or file server (Queue Server mode). ...(There was detected when the HP JetDirect print server tried to attach to one (the print server object must be a networking or security problem. Make sure that the print server is running and that all... object from the list of queue servers if you upgrade to a new version of firmware.
... server or file server is running and that servers are functioning correctly. This may appear after being configured. The HP JetDirect print server was unable to find the NetWare print server (Remote Printer mode) or file server (Queue Server mode). ...(There was detected when the HP JetDirect print server tried to attach to one (the print server object must be a networking or security problem. Make sure that the print server is running and that all... object from the list of queue servers if you upgrade to a new version of firmware.