HP Jetdirect Security Guidelines
Page 1
... to educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended...
... to educate our customer base about printing and imaging security. whitepaper HP Jetdirect Security Guidelines Table of Contents: Introduction ...1 HP Jetdirect Overview ...2 What is an HP Jetdirect?...3 How old is Your HP Jetdirect?...4 Upgrading ...5 HP Jetdirect Administrative Guidelines 6 HP Jetdirect Hacks: TCP Port 9100...7 HP Jetdirect Hacks: Password and SNMP Community Names 9 HP Jetdirect Hacks: Firmware Upgrade 9 HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them 10 HP Jetdirect Hacks: Printer/MFP access 10 Recommended...
HP Jetdirect Security Guidelines
Page 6
...firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1/v2c SET Community Name has been changed • All non-active protocols have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. In many years. HP Jetdirect...several things before upgrading all HP Jetdirect firmware to the highest level. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will come from the four main HP Jetdirect product lines, ...
...firmware. • An Embedded Web Server (EWS) password has been specified • The default SNMPv1/v2c SET Community Name has been changed • All non-active protocols have cryptographic security capability. • SET 2: The 610n, 615n, 620n, 625n, en3700, and Embedded Jetdirect (J7949E) models. In many years. HP Jetdirect...several things before upgrading all HP Jetdirect firmware to the highest level. As you can see, replacing a discontinued 400n MIO model with a new external parallel port print server like the 300X will come from the four main HP Jetdirect product lines, ...
HP Jetdirect Security Guidelines
Page 9
... and their how their printing behavior. HP Jetdirect Hacks: Firmware Upgrade A nice overview of an upgrade programming failure (due to a network outage, client lockup, printer powered down the download file. In case of the various methods used by a trusted CA to recover, albeit with TFTP server information. Also note that belong to the HP Jetdirect device. However, when using...
... and their how their printing behavior. HP Jetdirect Hacks: Firmware Upgrade A nice overview of an upgrade programming failure (due to a network outage, client lockup, printer powered down the download file. In case of the various methods used by a trusted CA to recover, albeit with TFTP server information. Also note that belong to the HP Jetdirect device. However, when using...
HP Jetdirect Security Guidelines
Page 10
... how the HP Jetdirect firmware upgrade capability is a fundamental step in the same manner. For users of the individuals leaving the conference room. This active/passive behavior is the proper deployment of a text document that was sent between an email client and email server, it can... the network can open it to behave in the opposite direction (from a node by sending it is that destination. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. Let's review what a MITM attack against the...
... how the HP Jetdirect firmware upgrade capability is a fundamental step in the same manner. For users of the individuals leaving the conference room. This active/passive behavior is the proper deployment of a text document that was sent between an email client and email server, it can... the network can open it to behave in the opposite direction (from a node by sending it is that destination. HP Jetdirect Hacks: Sniffing Print Jobs and Replaying Them Easily available network tools that allows passive sniffing. Let's review what a MITM attack against the...
HP Jetdirect 620n Print Server Setup Guide
Page 5
Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. Warranty Service F. HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. B. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5
Specifications and Regulatory Statements Specifications 45 Regulatory Statements 46 E. Warranty Service F. HP Jetdirect Solutions Summary Tools Overview 31 Supported Network Protocols 32 HP Installation Software 33 C. HP Jetdirect EIO Control Panel Menus Introduction 36 Classic Control Panel 37 Graphical Control Panel 40 D. B. HP Support and Service HP Support Online 53 Firmware Upgrades 53 HP Support By Phone 54 5
HP Jetdirect 620n Print Server Setup Guide
Page 31
... (TCP port 80) ■ Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw...
... (TCP port 80) ■ Embedded Web Server, HTTPS (TCP port 443) ● HP management and support software: ■ HP Web Jetadmin software (TCP/IP and IPX/SPX networks) ■ HP Jetdirect Download Manager (HP Jetdirect firmware upgrades) HP Jetdirect Printing Support ● Embedded HP Jetdirect services: ■ LPD printing (TCP port 515) ■ IPP printing (TCP port 631) ■ FTP printing (TCP ports 20, 21) ■ Raw...
HP Jetdirect 620n Print Server Setup Guide
Page 34
... printers-anywhere on your intranet ● Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■ Windows NT...
... printers-anywhere on your intranet ● Remote installation, configuration, and management of HP Jetdirect-connected print servers, non-HP printers that support the standard MIBs, and printers with embedded web servers ● Alerts and consumables management ● Remote firmware upgrades for HP Jetdirect print servers ● Asset tracking and utilization analysis HP Internet Printer Connection ● Supported Networks (TCP/IP): ■ Windows NT...
HP Jetdirect 620n Print Server Setup Guide
Page 53
... Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to a quick solution! Firmware upgrade files and software tools are available from the World Wide Web at http://www.hp.com/support/net_printing is a great place to start for HP Jetdirect print servers with internal Flash memory. F HP Support and Service HP Support...
... Web server, and HP Jetdirect Download Manager (Windows) or HP Web Jetadmin software. Firmware Upgrades Hewlett-Packard offers downloadable electronic upgrades for answers to a quick solution! Firmware upgrade files and software tools are available from the World Wide Web at http://www.hp.com/support/net_printing is a great place to start for HP Jetdirect print servers with internal Flash memory. F HP Support and Service HP Support...
HP Jetdirect Administrator's Guide
Page 8
....nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. For firmware updates, see Chapter 4), and network management applications. Supported Network Protocols Note For HP Jetdirect wireless print servers...
....nnnnnnnn 620n J7934A EIO slot 10/100TX Full** V.28.xx.nnnnnnnn * Limited support includes TCP/IP, IPX Direct Mode printing, AppleTalk (EtherTalk), LPD/Windows printing, limited upgrade capabilities. ** Full support includes TCP/IP, IPX/SPX, AppleTalk (EtherTalk), LPR/LPD, Security. For firmware updates, see Chapter 4), and network management applications. Supported Network Protocols Note For HP Jetdirect wireless print servers...
HP Jetdirect Administrator's Guide
Page 12
... equivalent printer documentation (shipped with off-the-shelf print servers). HP Support HP Online Support Click your HP Jetdirect print server - 24 hours a day, 7 days a week. The HP Web site: http://www.hp.com/support/net_printing is not supported. Firmware Upgrades Hewlett-Packard offers downloadable firmware upgrades for HP Jetdirect print servers that have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for answers to questions about your...
... equivalent printer documentation (shipped with off-the-shelf print servers). HP Support HP Online Support Click your HP Jetdirect print server - 24 hours a day, 7 days a week. The HP Web site: http://www.hp.com/support/net_printing is not supported. Firmware Upgrades Hewlett-Packard offers downloadable firmware upgrades for HP Jetdirect print servers that have factory-installed HP Jetdirect print servers). ● This manual, the HP Jetdirect Print Server Administrator's Guide for answers to questions about your...
HP Jetdirect Administrator's Guide
Page 13
...: ftp> bin ftp> hash ftp> cd /download ftp> put ftp>######### ftp> bye ENWW Introducing the HP Jetdirect Print Server 13 HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go /webjetadmin/ ● The embedded Web server resident on the print server provides a firmware upgrade feature using one of the following firmware installation tools: ● HP Jetdirect Download Manager (Windows).
...: ftp> bin ftp> hash ftp> cd /download ftp> put ftp>######### ftp> bye ENWW Introducing the HP Jetdirect Print Server 13 HP Jetdirect Download Manager can be downloaded from HP online support at: http://www.hp.com/go /webjetadmin/ ● The embedded Web server resident on the print server provides a firmware upgrade feature using one of the following firmware installation tools: ● HP Jetdirect Download Manager (Windows).
HP Jetdirect Administrator's Guide
Page 16
... 2.6, 7, 8 (SPARCsystems only) TCP/IP Fast and easy installation of HP Jetdirect-connected printers. ● Supplied on the HP Jetdirect CD-ROM, and may be downloaded from HP's Website ● Not supported on value-based products, such as ew2400 ENWW HP Software Solutions Summary 16 Remote firmware upgrades for HP Jetdirect print servers. ● HP's preferred solution for supported system updates.) Windows 2000, XP...
... 2.6, 7, 8 (SPARCsystems only) TCP/IP Fast and easy installation of HP Jetdirect-connected printers. ● Supplied on the HP Jetdirect CD-ROM, and may be downloaded from HP's Website ● Not supported on value-based products, such as ew2400 ENWW HP Software Solutions Summary 16 Remote firmware upgrades for HP Jetdirect print servers. ● HP's preferred solution for supported system updates.) Windows 2000, XP...
HP Jetdirect Administrator's Guide
Page 56
... the user. 0: Disables sending data to 0, the refresh rate is determined by the IP address obtained when first powered on the print server. 0 disables, 1 (default) enables SNMP. In addition, firmware upgrades through current HP downloading utilities will be disabled. Table 3.3 TFTP Configuration File Parameters (7 of 12) default-ip: Specifies the IP address to use when...
... the user. 0: Disables sending data to 0, the refresh rate is determined by the IP address obtained when first powered on the print server. 0 disables, 1 (default) enables SNMP. In addition, firmware upgrades through current HP downloading utilities will be disabled. Table 3.3 TFTP Configuration File Parameters (7 of 12) default-ip: Specifies the IP address to use when...
HP Jetdirect Administrator's Guide
Page 59
.... The command format is: upgrade: where, TFTP Server IP is the IP address of the TFTP server, Version specifies the firmware version of the upgrade file, Product Number specifies and must match the product number of the print server, Filename is a higher version than the installed version. upgrade: To configure one or more Jetdirect print servers with your multifunction or all...
.... The command format is: upgrade: where, TFTP Server IP is the IP address of the TFTP server, Version specifies the firmware version of the upgrade file, Product Number specifies and must match the product number of the print server, Filename is a higher version than the installed version. upgrade: To configure one or more Jetdirect print servers with your multifunction or all...
HP Jetdirect Administrator's Guide
Page 90
...(Read-only parameter) The number of times that determines which the HP Jetdirect print server's IP address was no allowable entry in the print server's host access list. In addition, firmware upgrades through current HP downloading utilities will respond to HP without prompting the user. If a user-specified get -cmnty-name...Config IP (Read-only parameter) The IP address of the system from which SNMP GetRequests the HP Jetdirect print server will be re-selected. 1: Allows the sending of data to HP without prompting the user. 0: Disables sending data to . DHCP Renew Time (Read-only ...
...(Read-only parameter) The number of times that determines which the HP Jetdirect print server's IP address was no allowable entry in the print server's host access list. In addition, firmware upgrades through current HP downloading utilities will respond to HP without prompting the user. If a user-specified get -cmnty-name...Config IP (Read-only parameter) The IP address of the system from which SNMP GetRequests the HP Jetdirect print server will be re-selected. 1: Allows the sending of data to HP without prompting the user. 0: Disables sending data to . DHCP Renew Time (Read-only ...
HP Jetdirect Administrator's Guide
Page 93
...): disables, that is, provides loose interpretation. 1: enables, that the upgrade file is the path and filename of the upgrade file, specifies and must be displayed. The print server will disable DLC/LLC operation. Table 3.4 Telnet Commands and Parameters (15 of a firmware upgrade file. READY: Indicates the HP Jetdirect print server is the factory-assigned address. An additional status message may...
...): disables, that is, provides loose interpretation. 1: enables, that the upgrade file is the path and filename of the upgrade file, specifies and must be displayed. The print server will disable DLC/LLC operation. Table 3.4 Telnet Commands and Parameters (15 of a firmware upgrade file. READY: Indicates the HP Jetdirect print server is the factory-assigned address. An additional status message may...
HP Jetdirect Administrator's Guide
Page 122
... in the left margin ● Refresh Rate: to set the time interval (in which is recommended for enabling miscellaneous advanced protocols and functions ● Firmware Upgrade: to update your HP Jetdirect print server with new features and enhancements (model ew2400 upgrade features are provided: ● Misc. Other Settings This item provides access to a variety of management and...
... in the left margin ● Refresh Rate: to set the time interval (in which is recommended for enabling miscellaneous advanced protocols and functions ● Firmware Upgrade: to update your HP Jetdirect print server with new features and enhancements (model ew2400 upgrade features are provided: ● Misc. Other Settings This item provides access to a variety of management and...
HP Jetdirect Administrator's Guide
Page 128
.... To upgrade the print server using the embedded Web server: 1. Firmware Upgrade For print servers that support firmware upgrades, this page allows you to upgrade the print server with character strings -such as job control commands -- LPD Queues The LPD Queues page allows you to specify LPD (line printer daemon) print queues on the print server before ENWW Using the Embedded Web Server 128 Note HP Jetdirect ew2400 print servers will...
.... To upgrade the print server using the embedded Web server: 1. Firmware Upgrade For print servers that support firmware upgrades, this page allows you to upgrade the print server with character strings -such as job control commands -- LPD Queues The LPD Queues page allows you to specify LPD (line printer daemon) print queues on the print server before ENWW Using the Embedded Web Server 128 Note HP Jetdirect ew2400 print servers will...
HP Jetdirect Administrator's Guide
Page 150
Disabling Telnet, FTP firmware upgrades, and RCFG is lost, you may lose your 802.1X parameters prior to connection. In addition, you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use of 2) Item Enable Management Protocols Description Enable or disable Telnet ... before connecting to your network, you may need to be intercepted. Table 4.13 Other Protocols (2 of FTP to upgrade firmware on the print server. If communication with your connection. The supported 802.1X authentication protocols and associated configuration depend on the...
Disabling Telnet, FTP firmware upgrades, and RCFG is lost, you may lose your 802.1X parameters prior to connection. In addition, you to configure 802.1X authentication settings on the Jetdirect print server as LAN switches) must use of 2) Item Enable Management Protocols Description Enable or disable Telnet ... before connecting to your network, you may need to be intercepted. Table 4.13 Other Protocols (2 of FTP to upgrade firmware on the print server. If communication with your connection. The supported 802.1X authentication protocols and associated configuration depend on the...
HP Jetdirect Administrator's Guide
Page 199
... the Access Point's antenna will regain its previous configuration prior to the download failure. If a firmware download failure occurs on , the print server will improve the range and performance of interference. ENWW Troubleshooting the HP Jetdirect Print Server 199 Firmware Download Failure HP ew2400 firmware upgrades must be accomplished by: ■ moving the printer ■ moving the Access Point or wireless...
... the Access Point's antenna will regain its previous configuration prior to the download failure. If a firmware download failure occurs on , the print server will improve the range and performance of interference. ENWW Troubleshooting the HP Jetdirect Print Server 199 Firmware Download Failure HP ew2400 firmware upgrades must be accomplished by: ■ moving the printer ■ moving the Access Point or wireless...