HP Enterprise printers and scanners - Imaging and Printing Security Best Practices (white paper)

Configuring MFP File System Settings
The File system category provides settings for access to the MFP hard drive, the Compact Flash card, and optional data storage
devices. Several security settings are available that can help prevent unauthorized access to data.
File System External Access
It is recommended that all external access to the file systems on your MFPs be disabled. To do so, follow these instructions:
Click the File System category to select File System External Access (Figure 46).
Figure 46: The File System External Access options.
Disable all options (see the table below).
The following table lists and explains the recommended settings:
File system Access
Option
Recommended Setting Explanation
PJL Disabled
Prevents access to the file
system through this protocol
PostScript Disabled
Prevents access to the file
system through this protocol.
NOTE: Disabling PostScript may
affect interactions with third
party applications.
Secure File Erase Mode
This setting determines the level of overwriting applied to delete files during routine functions. This includes removal of files for
the Secure Storage Erase function. The settings are:
Non-secure Fast Erase does a standard erase with no additional security.
Secure Fast Erase overwrites files using one pass. This takes some extra time, but it provides reasonable security.
Secure Sanitizing Erase overwrites files with three passes. It noticeably slows the MFP, but it ensures that files are completely
unrecoverable.
Use Secure Sanitizing Erase to meet stringent security requirements such as Department of Defense standards.
36