Multifunction Peripheral (MFP) Security for Enterprise Environments

MFP Security White Paper
1
1 Introduction
The networked imaging and printing infrastructure has become increasingly sophisticated, becoming a critical
component of the office infrastructure. Despite its importance, network administrators have largely ignored the
security risks of their imaging and printing infrastructure, oftentimes leaving the infrastructure entirely unsecured.
While attacks against imaging and printing devices have been rare, administrators should safeguard their
resources before becoming affected; attacks against unsecured network communications can result in loss of
confidential data, denial of service attacks against networked printers may result in lost productivity, and
unauthorized use of imaging and printing devices may result in the loss of consumables.
HP has made security an integral component of its imaging and printing devices and solutions. HP devices
support a wide-range of industry standard and trusted security protocols, as well as class-differentiating
functions and solutions, allowing for secure management, device integrity, privacy, and access control:
• SNMPv3 for standards-based secure enterprise management
• SSL/TLS (Secure Sockets Layer/Transport Layer Security) and HTTPS (Hypertext Transmission Protocol,
Secure) for standards-based secure web management
• 802.1X authentication for Wireless security, including EAP-TLS, EAP-MD5, LEAP, and PEAP for access
control and dynamic key encryption (WEP and WPA are supported wireless security feautres)
• AES (Advanced Encryption Standard) for print encryption and integrity
• DoD (Department of Defense) 5520-22m conforming Disk Erase
• Microsoft Windows and Novell Authentication for Digital Sending
• X.509 Certificates for server/device authentication
• IP (Internet Protocol) Access Control Lists for secured printing and management
• Control Panel Lock
Section 2, Imaging and Printing Infrastructure, describes the security capabilities of the components that form
the imaging and printing infrastructure.
Section 3, Recommendations, provides guidance on the configuration of the Imaging and Printing
infrastructure for secure operation.
Section 4, Acronyms, defines acronyms used throughout this paper.
Section 5, References, provides web-based references to the components of the system.
2 Imaging and Printing Infrastructure
Today’s imaging and printing infrastructure consists of a sophisticated system of components, including print
users, print spoolers, management platforms (for example, Web Jetadmin or Digital Sending software), and
imaging and printing devices (for example, multifunction peripherals and printers).
A variety of network protocols are used to interconnect these components: the SMB/CIFS printing protocol for
print users, Port 9100 and LPR protocols for printing from spoolers, and the SNMP protocol for management.