Practical considerations for imaging and printing security
Page 1
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
... worms 6 Protect Information on the Network ...6 Network connectivity with HP Jetdirect devices 6 HP Digital Sending Software (DSS 7 Fax/LAN bridging ...7 Effectively Monitor and Manage...7 HP Web Jetadmin for fleet management 7 Device and service control ...7 Firmware updates ...7 Logging device activity ...8 Common Criteria Certification ...8 The future of imaging and printing security ...8 Document security and Digital Rights Management 8 Trusted...
HP Jetdirect Security Guidelines
Page 1
... educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
... educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10...
HP Jetdirect Security Guidelines
Page 2
...growth in question. Fast forwarding to the present, we have never had their firmware updated or their configuration changed. Customers are thought to be unbreakable for the next few million HP Jetdirect products have been in the market place regarding protocol suites and networking infrastructure. At... one of direct attachment to a spooler. One of the challenges HP Jetdirect has in terms of security is actually the result of printers increased and the need of the first print servers to widely implement security protocols such as if the printer was directly connected ...
...growth in question. Fast forwarding to the present, we have never had their firmware updated or their configuration changed. Customers are thought to be unbreakable for the next few million HP Jetdirect products have been in the market place regarding protocol suites and networking infrastructure. At... one of direct attachment to a spooler. One of the challenges HP Jetdirect has in terms of security is actually the result of printers increased and the need of the first print servers to widely implement security protocols such as if the printer was directly connected ...
HP Jetdirect Security Guidelines
Page 4
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
... 3.11 HP Jetdirect J2550A, J2552A MIO Print Servers Microsoft Windows 95 HP Jetdirect J2550B, J2552B MIO Print Servers HP Jetdirect J3110A, J3111A EIO Print Servers HP Jetdirect J3263A 300X External Print Server HP Jetdirect J3113A 600n EIO Print Server Microsoft Windows 98 HP Jetdirect J3258A 170x External Print Server Microsoft Windows 2000 Professional HP Jetdirect J4169A 610n EIO Print Server Microsoft Windows XP HP Jetdirect J6057A 615n EIO Print Server Microsoft Windows 2003 Server HP Jetdirect J7934A 620n EIO Print Server HP Jetdirect J7961A 635n EIO Print Server Date Released...
HP Jetdirect Security Guidelines
Page 5
... after purchase SSL/TLS for Management, SNMPv3, 802.1X PEAP. Discontinued HP Jetdirect Models 5 HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
... after purchase SSL/TLS for Management, SNMPv3, 802.1X PEAP. Discontinued HP Jetdirect Models 5 HP Jetdirect Models: HP Jetdirect J3258G 170x External Parallel Print server J6035G 175x External USB 1.1 Print Server J3263G 300x External Print server J7983G 510X External 3-Port Print Server J7942G en3700 External USB 2.0 Print Server J7934G 620n EIO 10/100 Print Server J7949E Embedded Jetdirect 10/100 (not for sale individually, comes installed on the formatter for...
HP Jetdirect Security Guidelines
Page 6
...These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. One of the easiest ways to properly recommend configurations for many...network before securing one must "lock down" several things before upgrading all HP Jetdirect firmware to be effective. With security configurations, one thing can be upgraded. The ... security capability in HP Jetdirect's product line. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the HP LaserJet 4000 and give...
...These models have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. One of the easiest ways to properly recommend configurations for many...network before securing one must "lock down" several things before upgrading all HP Jetdirect firmware to be effective. With security configurations, one thing can be upgraded. The ... security capability in HP Jetdirect's product line. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the HP LaserJet 4000 and give...
HP Jetdirect Security Guidelines
Page 7
... Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n...
... Embedded Jetdirect J4100A 400n 10Mbps MIO Print server J4106A 400n 10Mbps MIO Print server J3110A 600n 10Mbps EIO Print server J3111A 600n 10Mbps EIO Print server J3113A 600n 10/100 EIO Print server J4169A 610n 10/100 EIO Print Server J6057A 615n 10/100 EIO Print Server J3263A/J3263G 300x External Print server J3265A 500X External 3-Port Print Server J7983G 510X External 3-Port Print Server J7942A/J7942G en3700 External USB 2.0 Print Server J7934A/J7934G 620n...
HP Jetdirect Security Guidelines
Page 9
... something new. After you have upgraded all software and firmware, change your passwords on users and their how their printing behavior. However, when using SSL/TLS, be provided, in the form of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SSL/TLS. Also, consider migrating to contact...
... something new. After you have upgraded all software and firmware, change your passwords on users and their how their printing behavior. However, when using SSL/TLS, be provided, in the form of updating HP Jetdirect firmware: • HP Download Manager / HP Web Jetadmin • FTP • Embedded Web Server When using SSL/TLS. Also, consider migrating to contact...
HP Jetdirect Security Guidelines
Page 10
... to help protect against unauthorized connections. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is a fundamental step in a manner that was sent between an FTP client and an FTP server, it can use the EWS to all the data sent between an email client...claim to plant the listening device in the conference room and instead pulling a fire alarm in the building then recording the conversation of a print job, it can be another node on the network can perform effective MITM attacks against passive and active sniffing attacks. Let's review what ...
... to help protect against unauthorized connections. How the EWS is protected determines how the HP Jetdirect firmware upgrade capability is a fundamental step in a manner that was sent between an FTP client and an FTP server, it can use the EWS to all the data sent between an email client...claim to plant the listening device in the conference room and instead pulling a fire alarm in the building then recording the conversation of a print job, it can be another node on the network can perform effective MITM attacks against passive and active sniffing attacks. Let's review what ...
HP Jetdirect 620n Print Server Setup Guide
Page 5
Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. Warranty Service F. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 B. HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C.
Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. Warranty Service F. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5 B. HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C.
HP Jetdirect 620n Print Server Setup Guide
Page 12
... is operating properly You can turn the printer off and then on the HP Jetdirect CD-ROM. 3. Proceed to reinitialize the print server and try again. This section of the configuration page also contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■ Manufacturing identification number Note...
... is operating properly You can turn the printer off and then on the HP Jetdirect CD-ROM. 3. Proceed to reinitialize the print server and try again. This section of the configuration page also contains productspecific information, such as: ■ HP Jetdirect product number ■ Firmware revision number ■ LAN Hardware (MAC) address ■ Manufacturing identification number Note...
HP Jetdirect 620n Print Server Setup Guide
Page 31
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
...; Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw IP printing (HP-proprietary TCP...
HP Jetdirect 620n Print Server Setup Guide
Page 34
...-anywhere on your intranet ● Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■ Windows NT...
...-anywhere on your intranet ● Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■ Windows NT...
HP Jetdirect 620n Print Server Setup Guide
Page 35
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
...; NetWare 5.x, 6.0 ● Simplified installation, printing, and bidirectional management of HP Jetdirect-connected printers under Novell Distributed Print Services (NDPS) ● Allows automatic discovery and installation of HP Jetdirectconnected printers into NDPS via IPX ● Frees up user licenses ● Allows disabling of SAPs to reduce network traffic ● For IPX printing, requires HP Jetdirect firmware version X.03.06 or...
HP Jetdirect 620n Print Server Setup Guide
Page 53
... upgrades may be installed using several tools including File Transfer Protocol (FTP), the embedded Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. F HP Support and Service HP Support Online Click your HP Jetdirect print server - 24 hours a day, 7 days a week. Firmware upgrade files and software tools are available from the World Wide Web at http://www...
... upgrades may be installed using several tools including File Transfer Protocol (FTP), the embedded Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. F HP Support and Service HP Support Online Click your HP Jetdirect print server - 24 hours a day, 7 days a week. Firmware upgrade files and software tools are available from the World Wide Web at http://www...
HP Jetdirect Administrator's Guide
Page 8
... using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades". Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. ENWW Introducing the HP Jetdirect Print Server 8 Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product model and its operating firmware version. See Table 1.2. *** xx represents...
... using various methods, including the HP Jetdirect configuration page (see Chapter 9), Telnet (see Chapter 3), embedded Web server (see "Firmware Upgrades". Supported Network Protocols Note For HP Jetdirect wireless print servers, this section assumes that use only. ENWW Introducing the HP Jetdirect Print Server 8 Supported Print Servers The features and capabilities of HP Jetdirect print servers depend on the print server's product model and its operating firmware version. See Table 1.2. *** xx represents...
HP Jetdirect Administrator's Guide
Page 12
... Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for the applicable Jetdirect product models. ● HP Jetdirect Setup guides, supplied on CD-ROM with printers that contain upgradeable memory. ENWW Introducing the HP Jetdirect Print Server 12 Firmware Upgrades Hewlett-Packard offers downloadable firmware upgrades for answers to questions about your way to start for HP Jetdirect print servers...
... Note HP Jetdirect ew2400 print servers will have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for the applicable Jetdirect product models. ● HP Jetdirect Setup guides, supplied on CD-ROM with printers that contain upgradeable memory. ENWW Introducing the HP Jetdirect Print Server 12 Firmware Upgrades Hewlett-Packard offers downloadable firmware upgrades for answers to questions about your way to start for HP Jetdirect print servers...
HP Jetdirect Administrator's Guide
Page 48
...svr: ● pri-dns-svr: ● smtp-svr: TCP/IP Print Options ● 9100-printing: ● interlock: ● ftp-printing: ● buffer-packing: ● ipp-printing: ● write-mode: ● lpd-printing: ● mult-tcp-conn: ● banner: TCP/IP Raw Print Ports ● raw-port: TCP/IP Access Control ● allow: ...arbitration: ● mdns-pri-svc: ● phone-home-config: ● web-refresh: ENWW TCP/IP Configuration 48 Table 3.2 lists supported TFTP commands (HP Jetdirect firmware version V.28.xx or later). Table 3.3 describes the TFTP parameters.
...svr: ● pri-dns-svr: ● smtp-svr: TCP/IP Print Options ● 9100-printing: ● interlock: ● ftp-printing: ● buffer-packing: ● ipp-printing: ● write-mode: ● lpd-printing: ● mult-tcp-conn: ● banner: TCP/IP Raw Print Ports ● raw-port: TCP/IP Access Control ● allow: ...arbitration: ● mdns-pri-svc: ● phone-home-config: ● web-refresh: ENWW TCP/IP Configuration 48 Table 3.2 lists supported TFTP commands (HP Jetdirect firmware version V.28.xx or later). Table 3.3 describes the TFTP parameters.
HP Jetdirect Administrator's Guide
Page 108
...or clear administrator passwords. Account section in this device. Table 4.1 HP Jetdirect Home Page Items (2 of 2) Item Host Name System Up Time System Contact System Location HP Jetdirect Firmware Version IP Address Hardware Address LAA Admin Password Description Specifies the .... For general information on the HP Jetdirect print server. A text string (stored on the Networking Tab. A Locally Administered Address (LAA) that identifies the physical location of this device. See TCP/IP on the HP Jetdirect print server) for example HP J7934A). This password may be locally ...
...or clear administrator passwords. Account section in this device. Table 4.1 HP Jetdirect Home Page Items (2 of 2) Item Host Name System Up Time System Contact System Location HP Jetdirect Firmware Version IP Address Hardware Address LAA Admin Password Description Specifies the .... For general information on the HP Jetdirect print server. A text string (stored on the Networking Tab. A Locally Administered Address (LAA) that identifies the physical location of this device. See TCP/IP on the HP Jetdirect print server) for example HP J7934A). This password may be locally ...
HP Jetdirect Administrator's Guide
Page 191
.... ■ Turn off the printer, remove the HP Jetdirect print server, and turn the printer off /on. If it is likely that appear on . For internal Jetdirect cards, turn the printer back on the printer control panel display. This information assumes you upgraded the Jetdirect firmware recently, power the print server off and back on the display? Procedure 3: Resolving...
.... ■ Turn off the printer, remove the HP Jetdirect print server, and turn the printer off /on. If it is likely that appear on . For internal Jetdirect cards, turn the printer back on the printer control panel display. This information assumes you upgraded the Jetdirect firmware recently, power the print server off and back on the display? Procedure 3: Resolving...