HP Scanjet Enterprise 7000n , HP Color LaserJet CP5525, HP Color LaserJet CM4540 MFP and HP LaserJet M4555 MFP - HP Imaging and Printing Security Best Practices

Chapter 2 HP LaserJet and Color LaserJet MFP Security Checklist 7
• Enable embedded IPSec to encrypt the data stream to include log data and file metadata
• Close unused ports and protocols.
• Save copies of log data at a separate location
• Add security solutions such as smartcard, swipe-card and thumbprint readers
Information Disclosure
Information disclosure is gathering information from an MFP and providing it to unauthorized users.
This can include authentication information, usage log information, or information from the contents
of a job. Such data stored on your hard drive is considered ‘at rest’ while data being transmitted
by your MFP device is considered ‘in transit’. Here are some ways information disclosure can relate
to an MFP:
• Reading stored print jobs on the MFP hard drive.
• Downloading log information
• Downloading address books
• Intercepting print jobs, copy jobs, fax jobs, or digital send jobs (such as email).
You can minimize the risks of information disclosure in the following ways:
• Enable IPSec to protect data in transit.
• Use hardware encryption to protect data at rest. Some devices may include an encrypted
disk. If not, you can add an HP Secure Hard Disk accessory to protect data stored on your
MFP. (Look for this product at hp.com or contact your HP product supplier).
• Close unused ports and protocols.
• Configure all possible password settings.
• Configure authentication.
• Configure SNMPv3 for Web Jetadmin.
Denial of Service
Denial of service is any type of interference with normal use of an MFP. This can include any of the
following:
• Canceling or pausing the print jobs of others
• Turning off the MFP remotely
• Disconnecting power to the MFP
• Removing the MFP formatter board
• Disconnecting the MFP from the network
• Causing interference with network communication to the MFP
• Changing the network location of the MFP
• Causing an error state that interrupts service