Xerox 6180N FreeFlow® Print Server Security Guide - Page 33

Secure Print

Page 33 highlights

Network Protocol FTP SSL NFS Required Access the server via FTP and/or submit jobs from a DigiPath/ FreeFlow client via the Digipath/FreeFlow Print Manager. This service (ftpd) is shutdown when Xerox FreeFlow Print Server security is set to high. In FreeFlow v2.0, the client has the ability to use secure FTP (sFTP) when Xerox FreeFlow Print Server security is set to high and FTP is not available. Connections can also be filtered using the IP Filter feature under Setup -> Security Profiles -> -> RPC tab. Required when using the TLS/SSL security feature and/or a FreeFlow 2.0+ client with Xerox FreeFlow Print Server security is set to high. Connections can also be filtered using the IP Filter feature under Setup -> IP Filter. Necessary when using NFS mounted directories. This service is disabled when Xerox FreeFlow Print Server security is set to high. Connections can also be filtered using the IP Filter feature under Setup -> Security Profiles -> -> RPC tab. NOTE: The IP Filtering (Setup->IP Filter) feature can also help in limiting access to the server. This is the Xerox FreeFlow Print Server's GUI interface to the SunScreen Lite firewall that is part of the Solaris 8 Operating System. This feature allows the user to limit the number of clients who are allowed to access the server via services such as LPR, IPP, HTTP, HTTPS, SMB Printing, and FTP. By default, the firewall is disabled (all ports open), but can be enabled to either only allow specified connections (by IP address, IP address range, or subnet mask) or to close all ports. For DRW clients, this mechanism exists under System Preferences -> Remote Workflow -> "Enable Specified Connections". NOTE: FreeFlow® v2.0 and newer allows users to select whether or not the Xerox FreeFlow Print Server server they connecting to will have high security enabled. If so, the client will use other communication paths such as sIPP (via SSL) for job submissions and sFTP for decomposition services (NetAgent). Secure Print MICR mode The MICR mode disables all Xerox FreeFlow Print Server features that allow additional prints to be produced (such as Sample Print, Reposition Output, etc.). Security Guide 29

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38

Security Guide
29
NOTE:
The IP Filtering (Setup->IP Filter) feature can also help in
limiting access to the server. This is the Xerox FreeFlow Print
Server's GUI interface to the SunScreen Lite firewall that is part of
the Solaris 8 Operating System. This feature allows the user to
limit the number of clients who are allowed to access the server
via services such as LPR, IPP, HTTP, HTTPS, SMB Printing, and
FTP. By default, the firewall is disabled (all ports open), but can be
enabled to either only allow specified connections (by IP address,
IP address range, or subnet mask) or to close all ports. For DRW
clients, this mechanism exists under System Preferences ->
Remote Workflow -> "Enable Specified Connections".
NOTE:
FreeFlow
®
v2.0 and newer allows users to select whether
or not the Xerox FreeFlow Print Server server they connecting to
will have high security enabled. If so, the client will use other
communication paths such as sIPP (via SSL) for job submissions
and sFTP for decomposition services (NetAgent).
Secure Print
MICR mode
The MICR mode disables all Xerox FreeFlow Print Server features
that allow additional prints to be produced (such as Sample Print,
Reposition Output, etc.).
FTP
Access the server via FTP and/or submit jobs from a DigiPath/
FreeFlow client via the Digipath/FreeFlow Print Manager. This
service (ftpd) is shutdown when Xerox FreeFlow Print Server
security is set to high. In FreeFlow v2.0, the client has the ability
to use secure FTP (sFTP) when Xerox FreeFlow Print Server
security is set to high and FTP is not available. Connections
can also be filtered using the IP Filter feature under Setup ->
Security Profiles -> <Any Profile> -> RPC tab.
SSL
Required when using the TLS/SSL security feature and/or a
FreeFlow 2.0+ client with Xerox FreeFlow Print Server security
is set to high. Connections can also be filtered using the IP
Filter feature under Setup -> IP Filter.
NFS
Necessary when using NFS mounted directories. This service
is disabled when Xerox FreeFlow Print Server security is set to
high. Connections can also be filtered using the IP Filter feature
under Setup -> Security Profiles -> <Any Profile> -> RPC tab.
Network
Protocol
Required