Ricoh Aficio SP C821DNT1 Design Guide - Page 60

Data Security Considerations

Page 60 highlights

Print Controller Design Guide for Information Security 2-4-2 Data Security Considerations • The FCU supports only G3 and G4 FAX protocols. Therefore, even if an initial connection is established with a terminal that does not use these protocols, the MFP will view this as a communication failure and terminate the connection. This prevents access via telecommunications lines to internal networks, and ensures that no illegal data can be introduced via these lines. • Internet FAX supports TIFF files and text-based e-mail only, which is true for both reception and transmission. If the data received through this function is in any other format, a communication error will result. • The Mail to Print feature is only capable of accepting JPEG and PDF file attachments. If these attachments are in any other format, a communication error will result. • Internet FAX can also be set to forward incoming FAX data to specific destinations that have been preset in the MFP. With servers using SMTP reception/delivery, the receiver can set the server to prohibit the delivery of incoming Internet FAX documents from specific senders, restricting SMTP access. • With LAN FAX transmission, the language processing subsystem is only able to process data that conforms to LAN FAX standards. If any other type of data is received, an error will result and the processing will be terminated. • IP-FAX uses SIP for session initiation. SIP is a protocol that conforms to the H.323 and RFC3261 standards prescribed by the ITU-T Recommendations. If any data is introduced which does not conform to these standards during transmission or reception, it will not be possible to establish SIP-based communication and the connection will then be terminated. Once a session is successfully established, communication is only performed in accordance with ITU-T recommended G3 FAX protocol. Since the MFP does not support any other type of communication protocol, if it attempts to connect to another machine that is not a FAX, it will not be possible to establish G3-based communication and the connection will then be terminated. • Internet FAX operates under a SIP environment and undergoes a DIGEST authentication process, whereby the MFP's encrypted password must be registered with the SIP server and inside the MFP itself. When calling or registering with the SIP server, this server will initiate DIGEST authentication, after which the MFP sends the appropriate request message (encrypted password) to the server. Once the MFP is authenticated, the operator can send and receive Internet FAXes. Page 60 of 86

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86

Print Controller Design Guide for Information Security
Page 60 of 86
2-4-2 Data Security Considerations
The FCU supports only G3 and G4 FAX protocols. Therefore, even if an initial connection is
established with a terminal that does not use these protocols, the MFP will view this as a
communication failure and terminate the connection. This prevents access via telecommunications
lines to internal networks, and ensures that no illegal data can be introduced via these lines.
Internet FAX supports TIFF files and text-based e-mail only, which is true for both reception and
transmission. If the data received through this function is in any other format, a communication error
will result.
The Mail to Print feature is only capable of accepting JPEG and PDF file attachments. If these
attachments are in any other format, a communication error will result.
Internet FAX can also be set to forward incoming FAX data to specific destinations that have been
preset in the MFP. With servers using SMTP reception/delivery, the receiver can set the server to
prohibit the delivery of incoming Internet FAX documents from specific senders, restricting SMTP
access.
With LAN FAX transmission, the language processing subsystem is only able to process data that
conforms to LAN FAX standards. If any other type of data is received, an error will result and the
processing will be terminated.
IP-FAX uses SIP for session initiation. SIP is a protocol that conforms to the H.323 and RFC3261
standards prescribed by the ITU-T Recommendations. If any data is introduced which does not
conform to these standards during transmission or reception, it will not be possible to establish
SIP-based communication and the connection will then be terminated. Once a session is successfully
established, communication is only performed in accordance with ITU-T recommended G3 FAX
protocol. Since the MFP does not support any other type of communication protocol, if it attempts to
connect to another machine that is not a FAX, it will not be possible to establish G3-based
communication and the connection will then be terminated.
Internet FAX operates under a SIP environment and undergoes a DIGEST authentication process,
whereby the MFP’s encrypted password must be registered with the SIP server and inside the MFP
itself. When calling or registering with the SIP server, this server will initiate DIGEST authentication,
after which the MFP sends the appropriate request message (encrypted password) to the server.
Once the MFP is authenticated, the operator can send and receive Internet FAXes.