HP Scanjet Enterprise 7000n , HP Color LaserJet CP5525, HP Color LaserJet CM4540 MFP and HP LaserJet M4555 MFP - HP Imaging and Printing Security Best Practices

Chapter 1 HP LaserJet and Color LaserJet MFP Security Checklist 3
Jetdirect connections and using HP Web Jetadmin. Administrators should have read the
MFP user guide, the MFP administrator guide, the Jetdirect administrator guide; Web
Jetadmin user guides, and help files. This checklist relies on these materials for necessary
information. All of these guides are available by searching for them at hp.com.
• MFPs: This checklist covers security settings for specific HP devices outlined at the
beginning of this document. It is meant to enable you to configure multiple devices
simultaneously. It assumes that the devices are turned on, connected to the network, and in
the factory default state.
Most of the settings recommended in this checklist apply to other HP MFPs and devices;
however, this checklist is tested and known to be successful only with the specified device
models.
• Updated firmware: This checklist assumes that each device has updated system firmware
and Jetdirect firmware. You should use the latest firmware available, but realize that
updated firmware may have new features not covered in this checklist. Updated firmware
is available for download and installation at hp.com.
• Web Jetadmin Version 10.x: This checklist is written for use with HP Web Jetadmin Version
10.1 and above.
• Enterprise environment: This checklist is created and tested in a TCP/IP enterprise
environment. However, most of the settings are applicable to any network.
• Network connection: This checklist assumes that each device is connected directly to a
local area network via Jetdirect or Jetdirect Inside (JDI). Other connections, such as direct-
connect via parallel cable or via USB are not covered in this checklist (this checklist
recommends disabling direct-connect ports).
• Settings are only suggested: All settings in this checklist are meant only as suggestions for
best-practice security in common enterprise environments. Use it as a reference, and make
judgments about each recommended setting before configuring your MFPs.
• Internet and intranet security: This checklist assumes that your network includes basic
security configurations and components. All MFPs should be installed behind network
firewalls and other standard tools such as updated virus protection applications.
Solutions covered
This checklist covers MFP security settings found in HP Web Jetadmin. This checklist covers no other
solutions or applications.
Organization
This checklist includes the following chapters:
• Chapter 2: Threat Model: The Threat Model chapter explains the security circumstances
relating to MFPs. It follows the Microsoft® STRIDE model.
• Chapter3: Advanced Security for Multiple HP Devices: The Advanced Security for Multiple
HP Devices provides some limited information on where to find configuration settings in
WJA for advanced network configurations.