User manual HP P2600

[. . . ] Practical considerations for imaging and printing security Overview . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Imaging and printing security. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 Common Criteria Certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 IEEE p2600 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] · Chai HP's Chai provides a means to extend an imaging and printing device's functionality. For example, Capella Technologies' VeriUser Authentication is implemented as a Chailet. Access controls restrict installation of Chailets to authorized administrators, however, as it is important to avoid installing malware on PCs, Chailets should only be installed from known and trusted sources, such as HP and its partners. Protect Information on the Network Protecting Information on the Network insures that network communications between users, administrators, the imaging and printing device, and the workflow are confidential and prevent unauthorized modification by maintaining their integrity. Network connectivity with HP Jetdirect devices Network connectivity for HP imaging and printing devices is provided by the HP Jetdirect family of products, including internal cards, external boxes, and embedded networking. HP Jetdirect provides many secure network protocols and services, including: 802. 1x for Wired Networks Provides access control to the Ethernet network. Network devices that are unable to authenticate to the 802. 1x authorization server have all network access denied. 802. 1x can prevent unauthorized users from attaching devices to the network as well as insure that only IT deployed and trusted devices, such as those with virus protection software, are allowed access. Allows for strong authentication, confidentiality, and integrity of communications, and can secure network printing and scanning protocols. The HP Jetdirect 635n IPv6/IPsec and Gigabit Ethernet internal print server, available November 2005, uses a cryptographic accelerator to provide click-to-clunk performance that rivals unsecured protocols, and supports the IPsec implementations available in all current major operating systems, including Windows, Unix®, and Linux®. Provide secure management of the imaging and printing device. SNMPv3 provides strong authentication and encryption of management communications and is used by HP Web Jetadmin to provide fleet management of HP imaging and printing devices. HTTPS using SSL/TLS provides security of web protocols and is used for secure management using the device's embedded web server, as well as security of web services such as consumable reordering. The secure form of the IPP protocol using SSL/TLS, secure IPP requires no additional configuration and is primarily intended for small networks lacking sophisticated IT administration. While Secure IPP may be used in large enterprise environments, IPsec is the recommended protocol for securing printing and scanning functions. IPsec SNMPv3 and HTTPS Secure IPP (IPP-S) 6 HP Digital Sending Software (DSS) HP Digital Sending Software 4. 0 can encrypt scanned documents between the MFP and the DSS Server. The DSS Server may then use the "Secondary email" function to store the encrypted document in a location accessible to third-party applications, such as Omtool, that then securely retransmit the document to its final destination via email. In addition to the secondary email function, secure sending to email, fax, and network folders may be achieved by securing the network communications between the DSS Server and the remote server using IPsec. To control email distribution, the SMTP server used by the DSS Server may be configured to enforce internal security policies. Such policies may prevent digital sending to email addresses outside of the internal network or analyzing the content of digitally sent documents to prevent breaches of confidentiality. Fax/LAN bridging The analog fax port of an HP imaging and printing device is isolated from the digital network connectivity of the device. Communications to the analog fax are routed directly to the device formatter and cannot be bridged to the digital network, preventing the threat of an attacker connecting to the analog fax through a telephone line and then gaining access to an internal network. HP is currently in the process of receiving Common Criteria Certification to validate this behavior in the HP LaserJet 4345mfp and 4730mfp. Effectively Monitor and Manage Effectively Monitor and Manage allows for imaging and printing infrastructure maintenance and enables auditing to facilitate compliance with policy and regulatory requirements. Effectively managing network resources is critical to maintaining a secure network. [. . . ] As necessary, users are prompted for their user credentials, and the MFP authenticates access with the local Windows server using LDAP or NTLM. VuLDAP authenticates users via the LDAP protocol and supports: · HP LaserJet 4100mfp, 9000mfp VuNTLM authenticates users via Microsoft's NTLM protocol, which provides encryption of account credentials, and supports: · HP LaserJet 4100mfp, 4345mfp, 9000mfp, 9040mfp 9050mfp · HP Color LaserJet 9500mfp, 4730mfp · HP Digital Sender 9200c Jetmobile SecureJet-PS Secure Print Product SecureJet PS supports a variety of authentication mechanisms for retrieving print jobs. A basic PIN may be used for job retrieval, using either the MFPs control panel or an add-on terminal, or a more advanced swipe card, proximity badge, or Smartcard can be used. Authentication provided by SecureJet may be integrated with Capella's MegaTrack software tool for job accounting. 10 Jetmobile Technologies SecureJet Authenticator Products Jetmobile have a series of authentication products including user pin (SecureJet FP), Smart Card (SecureJet SC), Proximity Card (SecureJet PX), or Swipe Card (SecureJet SW). [. . . ]