HP JetAdvantage Security Manager 10 Device E-LTU Instrukcja Użytkownika Pobierz pdf (Strona 75)

the fastest and most efficient way of delivering data to a printer using the TCP/IP protocol suite. Raw

data delivered over TCP is sent to the printer as if it had been delivered over a parallel port, serial

port, or any other port.

With Port 9100 enabled, clients are able to bypass print servers and print directly to the device.

Device access control lists can limit the amount of this behavior. This could be of concern to those

who track job accounting at the print server level. Upgrading firmware is accomplished through Port

9100. Extra safeguards should be established to protect against malicious firmware uploading. The

most common vulnerability for TCP Port 9100 is print jobs with embedded PJL commands. These PJL

commands can do a variety of things, some extremely malicious. TCP/IP headers are stripped and

data is presented to the printer as if it were directly connected to a PC. Years ago, printer drivers

would use the PJL command suite to control the PC attached printer in a variety of ways. In the

networking world, this presents an obvious potential for misuse.

The PJL Password setting is linked as a Relative Technology to the Port 9100 setting. Since Port 9100

will remain enabled in most environments as the network printing protocol of choice, it is suggested

that security be applied to the PJL settings. If Port 9100 is to be disabled in a customer environment,

this usually indicates a more uncommon printing protocol such as LPD, IPP or IPPS may be in use.

Make sure the policy is set accordingly or print productivity could be affected.

AirPrint

Apple AirPrint is a mobile printing solution included with Apple iOS v4.2 and later operating systems.

Using AirPrint, iPad, iPhone, and iPod touch users can print wirelessly to any ePrint-enabled HP printer

that is connected to the same local wireless network. (Most HP printers released in 2010 and later

support AirPrint.)

AirPrint is a mobile printing solution included with the Apple iOS v4.2 and later mobile operating

systems. Through AirPrint, full-quality printed output is achievable without the need to download or

install drivers. Users can print wirelessly from an iPad, iPhone and iPod to any HP printer that

supports AirPrint and is connected to the same local wireless network as the user. Most HP printers

released in 2010 and later support AirPrint. AirPrint is not backward compatible with older products

and there is no workaround to enable backward compatibility with older HP products. AirPrint uses

Bonjour, Apple's zero-configuration networking, to automatically discover AirPrint capable wireless

printers over the local network. If Bonjour is disabled at the printer, AirPrint functionality is disabled,

as well.

AirPrint is wireless network based, thus requiring a wireless access point for print job throughput.

Some attachable JetDirect wireless accessories act as an access point with a broadcasting SSID,

default gateway IP address of 192.168.223.1 and no wireless network security as the default. The

default wireless network SSID is based on the device model and is fairly easy to identify. Example:

HP-Print-0D-X585 Officejet. Without access point/wireless network security, a user can easily locate

the network SSID, connect to the wireless network, locate the printer and anonymously print to that

1 2 ... 70 71 72 73 74 75 76 77 78 79 80 ... 115 116

Brak uwag

HP JetAdvantage Security Manager 10 Device E-LTU Instrukcja Użytkownika Strona 75