HP Scanjet Enterprise 7000n , HP Color LaserJet CP5525, HP Color LaserJet CM4540 MFP and HP LaserJet M4555 MFP - HP Imaging and Printing Security Best Practices

Chapter 7 HP LaserJet and Color LaserJet MFP Security Checklist 74
normal use of the MFPs such as job storage.
Users attempting to make changes to the file system settings or attempting to access data
through network ports will be required to provide this password. Without the password, the
MFP denies access to the File System and to File System configurations.
Web Jetadmin stores the file system password in its encrypted device cache. It automatically
provides the password when the MFPs request it.
• Set the Secure File Erase Mode to Secure Fast Erase or to Secure Sanitizing Erase.
Secure File Erase enables the MFPs to overwrite storage space whenever files are deleted. This
ensures that the original data is destroyed.
Secure Fast Erase mode overwrites files one time. It slows MFP performance a bit, but it
provides reasonable security for most situations.
Secure Sanitizing Erase overwrites files 3 times. It slows MFP performance considerably, but it
provides even more assurance that the data is not recoverable. If your network is required to
meet stringent security requirements such as DOD regulations, you should use Secure Sanitizing
Erase.
Digital Sending Page Options
• Configure Auto Reset Send Settings to Delay before resetting the default settings,
and type a number of seconds to delay. This setting enables the MFPs to remove email
addresses or fax information from the control panel if a user forgets to reset it. The
authenticated user performing a digital send job is also automatically logged off.
With the timeouts configured, an MFP control panel will revert to the default screen, and a user
will not be able to reuse addresses and other destination data beyond the timeout period.
• Configure the Default From Address, and select Prevent users from changing the
Default From Address. The Default From Address setting allows you to place a
standard and consistent address in the From field of emails sent from the MFP. Selecting
Prevent users from changing the default from address ensures that users are unable
to tamper with the address in the From field, and that it is automatically populated with the
default or the authenticated users email address. These features ensure that nobody can use the
MFP to spoof identity or provide erroneous addresses. Consider using a From address that
describes the location or the type of MFP, or use a real address to monitor reply messages.
With the Default From Address configured, no one can change the From address in email
messages. The address you configure is the only address anyone can use.
Final Configurations
• Disable Direct Ports. This setting shuts down the MFP parallel ports. It restricts access to only
network connections.
Shutting down the parallel ports ensures that no one can configure the MFPs or print using
these connections. Thus, users will not be able to bypass job accounting or restricted access,
such as color printing, by using alternative connections.