HP Color LaserJet 4730 HP LaserJet MPF Products - Configuring Security for Mul - Page 77

Network Options, Secure, Erase, Sanitizing, Secure Sanitizing Erase, System, External, Access

Page 77 highlights

Secure Fast Erase mode overwrites files one time. It slows MFP performance a bit, but it provides reasonable security for most situations. Secure Sanitizing Erase mode overwrites files 3 times. It affects MFP performance, but not noticeably more than Secure Fast Erase mode does. It provides even more assurance that the data is not recoverable. If your network is required to meet stringent security requirements such as DOD regulations, you should use Secure Sanitizing Erase. With the MFPs configured for Secure Sanitizing Erase mode, some types of jobs and other MFP operations will take a bit more time. The amount of time depends on the size of the job and the specific model of MFP. • Configure File System External Access. The File System External Access settings shut down access to the MFP file system (storage devices and configuration settings) through protocols and ports. They eliminate access from various types of management tools. HP recommends shutting down all unused access to the file system. See the ramifications for each protocol below: NOTE: Some storage management tools, such as the Web Jetadmin Device Storage Manager (a Web Jetadmin add on available in the Product Update menu), use some of these protocols to access the file system. You might consider enabling these protocols only to update configurations and then disable them during normal MFP operation. Also note that disabling PJL and PML only affect file system access, but disabling NFS shuts down the protocol for the entire MFP. o Disable PJL. PJL (Printer Job Language) includes capabilities to manage configurations in the form of commands inside print jobs. Some of these commands can access MFP storage devices. Disabling PJL access to the file system disables the commands that affect the file system. This will not affect the preferences available for normal print jobs. With PJL disabled, the MFPs will ignore PJL commands that attempt to access the file system. o Disable PML. PML (Printer Management Language) is an HP proprietary protocol that manages MFPs and printers. Web Jetadmin uses PML for many of its configuration settings. Disabling this PML access eliminates the PML commands that affect access to the storage devices even for Web Jetadmin. If you wish to make changes to the file system, enable PML to make the changes, and disable it again. With this setting, MFPs will ignore PML commands that attempt to access the file system. o Disable NFS. The NFS protocol is a common UNIX ® and Linux file system protocol. Disabling it disables the entire protocol for the MFPs. With this setting, MFPs will ignore all NFS requests. If your network uses this protocol, you should enable it. o Enable PostScript. The PostScript protocol enables programs such as Adobe® products to access the MFPs directly for printing and for access to fonts. This feature is convenient and useful, and it is not known to pose risks to security. Network Page Options • Upload SSL Certificate (if available). 77

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86

Secure
Fast
Erase
mode overwrites files one time. It slows MFP performance a bit, but it provides
reasonable security for most situations.
Secure
Sanitizing
Erase
mode overwrites files 3 times. It affects MFP performance, but not
noticeably more than
Secure
Fast
Erase
mode does. It provides even more assurance that the
data is not recoverable. If your network is required to meet stringent security requirements such as
DOD regulations, you should use Secure Sanitizing Erase.
With the MFPs configured for
Secure Sanitizing Erase
mode, some types of jobs and other MFP
operations will take a bit more time. The amount of time depends on the size of the job and the
specific model of MFP.
Configure
File
System
External
Access
.
The
File
System
External
Access
settings shut down access to the MFP file system (storage
devices and configuration settings) through protocols and ports. They eliminate access from various
types of management tools. HP recommends shutting down all unused access to the file system. See
the ramifications for each protocol below:
NOTE:
Some storage management tools, such as the Web Jetadmin Device
Storage Manager (a Web Jetadmin add on available in the Product
Update menu), use some of these protocols to access the file system. You
might consider enabling these protocols only to update configurations and
then disable them during normal MFP operation.
Also note that disabling PJL and PML only affect file system access, but
disabling NFS shuts down the protocol for the entire MFP.
o
Disable
PJL
.
PJL (Printer Job Language) includes capabilities to manage configurations in the form
of commands inside print jobs. Some of these commands can access MFP storage
devices. Disabling PJL access to the file system disables the commands that affect the
file system. This will not affect the preferences available for normal print jobs.
With
PJL
disabled, the MFPs will ignore PJL commands that attempt to access the file
system.
o
Disable
PML
.
PML (Printer Management Language) is an HP proprietary protocol that manages
MFPs and printers. Web Jetadmin uses PML for many of its configuration settings.
Disabling this PML access eliminates the PML commands that affect access to the
storage devices even for Web Jetadmin. If you wish to make changes to the file
system, enable
PML
to make the changes, and disable it again. With this setting,
MFPs will ignore PML commands that attempt to access the file system.
o
Disable
NFS
.
The NFS protocol is a common UNIX ® and Linux file system protocol. Disabling it
disables the entire protocol for the MFPs. With this setting, MFPs will ignore all NFS
requests. If your network uses this protocol, you should enable it.
o
Enable
PostScript
. The PostScript protocol enables programs such as Adobe®
products to access the MFPs directly for printing and for access to fonts. This feature
is convenient and useful, and it is not known to pose risks to security.
Network Page Options
Upload SSL Certificate (if available).
7