HP Scanjet Enterprise 7000n , HP Color LaserJet CP5525, HP Color LaserJet CM4540 MFP and HP LaserJet M4555 MFP - HP Imaging and Printing Security Best Practices

Chapter 1 HP LaserJet and Color LaserJet MFP Security Checklist 2
possible security threats; however, some of these settings can cause unexpected problems in your
environment especially if you are using custom print solutions. Please be aware of the following
cautions before you begin:
Follow the Checklist in Order
The settings in this checklist are presented in a specific order to ensure success. Many of these
security settings can be configured successfully only in the correct order. You should follow the
instructions in this checklist exactly and avoid making additional configurations during this process.
Other settings can disrupt the order and cause unexpected results.
Understand the Ramifications
HP Web Jetadmin and MFPs include a wide variety of useful settings designed to make work easier
and more productive. However, raising the level of security may require sacrifices in these areas.
Be aware that applying this checklist will limit or even eliminate some of these features. See the
Ramifications chapter for more information.
HP provides this checklist as a guide to best-practice security configurations that allow for
reasonable convenience and usability. Some of the recommended settings create extra steps when
accessing and managing MFPs. For instance, once you disable EWS configuration, you cannot
access it again until you re-enable EWS configuration from HP Web Jetadmin.
These settings are tested in a variety of conditions and using various combinations of simulated
customer environments. Testing includes configuring all of the MFPs at the same time and verifying
that the affected features continue to function. However, it is impossible to test these configurations
in all possible network environments. You should test these settings in your environment to ensure
that you understand their effects. You may find that some of the settings cause undesirable
limitations. See the Ramifications section for further information and cautions.
Continue to be Vigilant
This checklist is provided only as a complementary guide to known best practices for increasing
MFP security. HP does not claim or warrant that these configurations prevent misuse of MFPs or
networks or that they prevent malicious attacks on MFPs or networks. Use this document at your
own risk.
MFP Environment
NIST defines several types of user environments, many of which are compatible with HP LaserJet
and Color LaserJet MFPs. However, this checklist is written for HP devices and MFPs in an
enterprise environment or a small to medium business environment. These environments use most of
the network features available with MFPs. Configuration of the NIST checklist in this document
primarily uses HP Web Jetadmin unless a security feature can only be configured using the EWS.
You should configure as much of this checklist as possible while adapting the settings to your
specific situation.
Assumptions
This checklist makes some assumptions about network administrators and about enterprise
environments:
• Network administrators: This checklist assumes that readers are trained network
administrators who are familiar with common networking practices such as configuring HP