Technical white paper HP FutureSmart Printer Integration for HP ArcSight Security Information Event Management Solution Table of contents Introduction 2 Detailed Description 2 HP FutureSmart Printer Configuration 2 Supported HP FutureSmart Printers 3 Supported Syslog Security Events 3 For more information 8 Public
Introduction HP FutureSmart printers provide event information through the standard Syslog server logging format. Advanced security logging events are now available through the “Enable CCC Logging” setting. This security event information can be sent to an active HP ArcSight Security Information and Event Manger (SIEM) solution using the included SmartConnector for HP Printers Syslog software.
Supported HP FutureSmart Printers The following HP FutureSmart printers support the “CCC Logging” setting for integration with HP ArcSight SIEM Printer Type Model Number HP Color LaserJet Enterprise HP Color LaserJet Enterprise HP Color LaserJet Enterprise HP Color LaserJet Enterprise HP Color LaserJet Enterprise Flow HP Color LaserJet Enterprise Flow HP Color LaserJet Enterprise Flow HP Color LaserJet HP Color LaserJet HP Color LaserJet HP LaserJet HP LaserJet HP LaserJet HP LaserJet HP LaserJet HP Laser
User is successfully identified and authenticated via Kerberos at control panel User is successfully identified and authenticated via LDAP at control panel User is NOT successfully identified and authenticated via User PIN at control panel User is NOT successfully identified and authenticated via Kerberos at control panel User is NOT successfully identified and authenticated via LDAP at control panel User is successfully identified and authenticated via User PIN when attempting copy at contro
Remove all User PIN records by clearing Authorized User List address book via EWS Add of User PIN record via DSMP (DbAddRec) Modification of User PIN record via DSMP (DbModifyRec) Deletion of User PIN record via DSMP (DbDeleteRec) Deletion of User PIN record via DSMP (DbClearRec) Deletion of all User PIN records when clearing User PIN address book via DSMP (ClearMFPAddressBook) Address book imported with User PIN records via the DSMP - ImportAddressBooks command Authentication Manager Syslog
Modification of the Disk Wipe Flag via SNMP wrapped PML request Fax Pin Syslog Events Set Fax PIN via the EWS Modification of the Fax PIN via the EWS Modification of the Fax PIN via DSMP ( SetMfpRecordInDevice) Certificates Syslog Events Deletion of a CA certificate via the EWS Installation of a CA certificate via the EWS Self-signed Jetdirect certificate generated via the EWS PFX certificate imported via the EWS Date/Time Syslog Events
IPSec - Address Template Syslog Events Addition of an Address Template via the EWS Modification of an Address Template via the EWS Deletion of an Address Template via the EWS IPSec – Action on Match for Default Rule Syslog Events Modification of the action-on-match for the Default IPsec/Firewall rule via the EWS IPSec – IPSec/Firewall Rule Syslog Events Addition of an IPsec/Firewall rule via the EWS Disable an IPsec/Firewall rule via the EWS Enable an IPsec/Firewall rule via the EWS Del
For more information To read more about HP ArcSight solution, go to: hp.com/go/arcsight hp.com/go/support Current HP driver, support, and security alerts delivered directly to your desktop © 2016 Copyright HP Development Company, L.P. The information contained herein is subject to change without notice. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services.