Lexmark C4342 Security White Paper - Page 29

Secure Access 29 • Scan to Fax • Fax Function • FTP Function • Held Jobs Access (such as confidential print jobs) • Flash Drive Print (for example, a flash drive) • Flash Drive Scan • Initiate Scans Remotely Local and remote access to several different administrative menus can also be managed with access controls. Examples of menus that can be controlled are: • Security menu • Settings menu • Network/Ports menu • Function configuration menu • SE menu • Device menu Device management functions can also be restricted with access controls. Examples of device capabilities that can be controlled are: • Remote management • Firmware updates • Apps configuration • Embedded web server access • Import/export all settings • Out of services erase. Apps can also be restricted with access controls. Examples of App settings that can be controlled are: • New Apps • Scan Center Active Directory Overview Microsoft Active Directory support is provided on solution-enabled Lexmark devices (those with touch-screen displays). Using Active Directory for the latest generation of Lexmark touch-screen devices is a secure method of authentication and authorization that is also simpler to set up and easier to manage device security. Active Directory authentication is provided by Kerberos and authorization by LDAP+GSSAPI. Active Directory is also supported in solution-enabled devices; however, the level of support is different. On some devices, the device is supported as a resource with device credentials (a device service account) while on others the device support is similar to a computer (a security principal).