HP Scanjet Enterprise 7000n , HP Color LaserJet CP5525, HP Color LaserJet CM4540 MFP and HP LaserJet M4555 MFP - HP Imaging and Printing Security Best Practices

Chapter 7 HP LaserJet and Color LaserJet MFP Security Checklist 75
This setting causes the MFPs to turn off and turn on. They will be out of service during this time.
This is also the reason this setting should be configured independently of other setting
configurations. If you attempt to configure this setting with other settings, the other settings will
likely fail. This is because Web Jetadmin temporarily loses contact with each MFP while the
MFP is restarting. Be sure to wait a few minutes until all of the MFPs are online and ready
before executing another configuration.
With Direct Ports disabled, the parallel and USB ports are turned off, and the MFPs behave as
if the ports do not exist.
• Disable EWS Config. Disabling EWS Config removes the EWS from the network. They
become unavailable to everyone. This eliminates many risks to security.
Since all of the EWS configuration settings are available in Web Jetadmin, there is no need to
have them available anywhere else. Keep in mind, though, that disabling EWS Config also
eliminates the affected settings from Web Jetadmin. Thus, you will have to enable EWS Config
temporarily to make changes to the configurations, and then disable it again.
With EWS Config disabled, the MFPs will not provide the EWS on the network. Web
browsers will return with no such web site found. This removes some conveniences that EWS
provide, but all of the functions that you would want to provide to users are available using the
MFP drivers or the control panels.
Overall Limitations
This overall configuration provides a high level of network security for HP MFPs. At the same time, it
introduces some limitations to the conveniences designed into the MFPs. Here are some known
affects of this overall configuration:
• Extra steps to use MFPs: Users will be required to provide usernames and passwords at the
control panels before they can use the MFPs.
• No access to control panel configuration menus: The control panels block access to
configuration settings for anyone. Configuration settings will be available only on Web
Jetadmin. Some settings will have to be enabled using Web Jetadmin before they can be
accessed.
• No way to cancel print jobs from the control panel: The MFPs will not allow a user to cancel
the print jobs of other users. The user would have to go to the person who submitted the job
and ask that person to cancel it.
• No way to cancel a fax job: The maximum lock setting on the control panel includes removing
the fax job cancelling options. Once a user selects Send, there is no way to stop an outgoing
fax (other than disconnecting the phone line). You can enable fax cancelling by configured
Control Panel Access Lock to Intermediate Lock.
• Extra steps for printing faxes: A user will be required to provide a fax PIN before printing a
fax.
• No Embedded Web Servers: Disabling EWS Config disables the entire EWS feature.