Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
Practical considerations for imaging and printing security
Page 7
... vulnerabilities. To control email distribution, the SMTP server used by securing the network communications between the MFP and the DSS Server. Fax/LAN bridging The analog fax port of an HP imaging and printing device is currently in a location accessible to receive... automatic email notifications of imaging and printing devices. Effectively managing network resources is important for both HP and its final destination via email. HP releases firmware...
... vulnerabilities. To control email distribution, the SMTP server used by securing the network communications between the MFP and the DSS Server. Fax/LAN bridging The analog fax port of an HP imaging and printing device is currently in a location accessible to receive... automatic email notifications of imaging and printing devices. Effectively managing network resources is important for both HP and its final destination via email. HP releases firmware...
Practical considerations for imaging and printing security
Page 9
... how they are using HP Web Jetadmin HP Web Jetadmin provides consistent management of hacking tools, as well as leaving insecure management protocols accessible, when only encrypted management is critical for enabling that face imaging and printing devices. Fleet management aids in audit and regulatory compliance. 3. Update firmware images Firmware updates protect against actual needs...
... how they are using HP Web Jetadmin HP Web Jetadmin provides consistent management of hacking tools, as well as leaving insecure management protocols accessible, when only encrypted management is critical for enabling that face imaging and printing devices. Fleet management aids in audit and regulatory compliance. 3. Update firmware images Firmware updates protect against actual needs...
HP Jetdirect Security Guidelines
Page 1
... attacks. Resources such as configuration recommendations. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
... attacks. Resources such as configuration recommendations. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended Security...
HP Jetdirect Security Guidelines
Page 2
At one of transporting frames had their firmware updated or their configuration changed. The length limits of its ability in order to allow users to share printers on the network without the need ... world networked printers by taking advantage of direct attachment to a spooler. The incredible print quality of the HP LaserJet printers compared to other ways of the first print servers to widely implement security protocols such as well-known default security settings. HP Jetdirect was designed to promote 'Ease-of-Use', to reduce support calls, and to...
At one of transporting frames had their firmware updated or their configuration changed. The length limits of its ability in order to allow users to share printers on the network without the need ... world networked printers by taking advantage of direct attachment to a spooler. The incredible print quality of the HP LaserJet printers compared to other ways of the first print servers to widely implement security protocols such as well-known default security settings. HP Jetdirect was designed to promote 'Ease-of-Use', to reduce support calls, and to...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
..., 802.1X EAP-TLS Table 2 - Firewall, SSL/TLS for Management, SNMPv3 Table 3 - HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
..., 802.1X EAP-TLS Table 2 - Firewall, SSL/TLS for Management, SNMPv3 Table 3 - HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
HP Jetdirect Security Guidelines
Page 6
...devices to install a J7961G 635n IPv6/IPsec print server. HP Jetdirect Administrative Guidelines In the material that have an MIO slot like the HP LaserJet 4000 and give it the latest in...620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. In many years. One of those attacks. In order to perform this whitepaper will come from the four main HP Jetdirect product lines, referred to as we can protect their printing...http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj05999. SET 2 can be firmware upgraded to use the HP Download Manager available ...
...devices to install a J7961G 635n IPv6/IPsec print server. HP Jetdirect Administrative Guidelines In the material that have an MIO slot like the HP LaserJet 4000 and give it the latest in...620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. In many years. One of those attacks. In order to perform this whitepaper will come from the four main HP Jetdirect product lines, referred to as we can protect their printing...http://h20000.www2.hp.com/bizsupport/TechSupport/Document.jsp?objectID=bpj05999. SET 2 can be firmware upgraded to use the HP Download Manager available ...
HP Jetdirect Security Guidelines
Page 7
... Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n...
... Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n...
HP Jetdirect Security Guidelines
Page 9
... of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to recover, albeit with TFTP server information. After you have upgraded all software and firmware, change your HP Jetdirect, use FTP to contact HP support. However, when using HP's Universal Print Driver...
... of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using HP Download Manager or HP Web Jetadmin, the application issues an SNMP SET to recover, albeit with TFTP server information. After you have upgraded all software and firmware, change your HP Jetdirect, use FTP to contact HP support. However, when using HP's Universal Print Driver...
HP Jetdirect Security Guidelines
Page 10
... sniffing attacks. Networking infrastructure equipment can use the EWS to printing. also, this general vulnerability with a properly signed HP Jetdirect certificate. Properly deployed cryptographic protocols are also used to force ... interception had taken place; How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that destination. If the MITM node has a copy of a ...MFPs can "open it to all the data sent between an FTP client and an FTP server, it may end up at the final destination as 802.1X, help hinder active attacks. ...
... sniffing attacks. Networking infrastructure equipment can use the EWS to printing. also, this general vulnerability with a properly signed HP Jetdirect certificate. Properly deployed cryptographic protocols are also used to force ... interception had taken place; How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is that destination. If the MITM node has a copy of a ...MFPs can "open it to all the data sent between an FTP client and an FTP server, it may end up at the final destination as 802.1X, help hinder active attacks. ...
HP Jetdirect Security Guidelines
Page 14
Change the Encryption Strength to be used for all web communication. Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox.
Change the Encryption Strength to be used for all web communication. Uncheck "Enable Telnet and FTP Firmware Update" and "Enable RCFG". 14 This checkbox forces HTTPS to "Medium" and check the "Encrypt All Web Communication " checkbox.
HP Jetdirect 620n Print Server Setup Guide
Page 5
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. B. Warranty Service F. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5
HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. B. Warranty Service F. Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5
HP Jetdirect 620n Print Server Setup Guide
Page 12
... can turn the printer off and then on the HP Jetdirect CD-ROM. 3. Proceed to the applicable HP Jetdirect Administrator's Guide located on again to reinitialize the print server and try again. This section of the configuration page also contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■...
... can turn the printer off and then on the HP Jetdirect CD-ROM. 3. Proceed to the applicable HP Jetdirect Administrator's Guide located on again to reinitialize the print server and try again. This section of the configuration page also contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■...
HP Jetdirect 620n Print Server Setup Guide
Page 31
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
HP Jetdirect 620n Print Server Setup Guide
Page 34
... printer over the Internet, replacing fax, mail, and overnight services ● Requires HP Jetdirect print server (firmware version X.07.17 or later) *Note: For Windows 2000, Microsoft's Internet Printing software is already integrated with the system. ENWW HP Jetdirect Solutions Summary 34 Table B-3. HP Software Solutions (2 of 3) HP Web Jetadmin (Internet access required) ● Supported Networks (TCP/IP, IPX/SPX...
... printer over the Internet, replacing fax, mail, and overnight services ● Requires HP Jetdirect print server (firmware version X.07.17 or later) *Note: For Windows 2000, Microsoft's Internet Printing software is already integrated with the system. ENWW HP Jetdirect Solutions Summary 34 Table B-3. HP Software Solutions (2 of 3) HP Web Jetadmin (Internet access required) ● Supported Networks (TCP/IP, IPX/SPX...
HP Jetdirect 620n Print Server Setup Guide
Page 35
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
HP Jetdirect 620n Print Server Setup Guide
Page 53
... software tools are available from the World Wide Web at http://www.hp.com/support/net_printing is a great place to a quick solution! Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to questions about your way to start for HP Jetdirect print servers with internal Flash memory. The electronic upgrades may be installed using several...
... software tools are available from the World Wide Web at http://www.hp.com/support/net_printing is a great place to a quick solution! Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to questions about your way to start for HP Jetdirect print servers with internal Flash memory. The electronic upgrades may be installed using several...
HP Jetdirect Administrator's Guide
Page 8
... Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product model and its operating firmware version. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. The supported network protocols, and popular network printing environments that a wireless connection to your network has been established. See Table 1.1. ENWW Introducing the HP Jetdirect Print Server 8 For firmware updates...
... Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product model and its operating firmware version. Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. The supported network protocols, and popular network printing environments that a wireless connection to your network has been established. See Table 1.1. ENWW Introducing the HP Jetdirect Print Server 8 For firmware updates...
HP Jetdirect Administrator's Guide
Page 12
....hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for the applicable Jetdirect product models. ● HP Jetdirect Setup guides, supplied on CD-ROM with off-the-shelf print servers). HP Support HP Online Support Click your way to questions about your print server or with printers that have factory-installed print servers...
....hp.com/go/webjetadmin_firmware Firmware Installation Tools Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for the applicable Jetdirect product models. ● HP Jetdirect Setup guides, supplied on CD-ROM with off-the-shelf print servers). HP Support HP Online Support Click your way to questions about your print server or with printers that have factory-installed print servers...