Home » HP Manuals » Multifunction Devices » HP LaserJet M5000 » Manual Viewer

HP LaserJet M5000 LaserJet MFP - Imaging and Printing Security Best Practices - Page 53

Embedded Web, Server Configuration, Option, Recommended, setting, Explanation, Outgoing Mail, Incoming

Add to My Manuals
Save this manual to your list of manuals

Page 53 highlights

Embedded Web Server Configuration Option Outgoing Mail (enabled by default) Recommended setting Enable as desired Incoming Mail (disabled by default) Leave blank to disable Cancel Job Button (disabled by Leave blank to disable default) Go Button (enabled by default) Leave blank to disable Command Invoke (enabled by default) Leave blank to disable Command Download (enabled by default) Leave blank to disable Command Load and Execute (enabled by default) Leave blank to disable Explanation Outgoing Mail enables the MFP to send alerts and AutoSend messages to a designated recipient. This is not necessarily a security-related feature. Use it as you see fit. This setting does not affect the MFP Send to Email feature. Normally, the MFP does not receive incoming mail; however, some legitimate network solutions might use it for certain communications. Unless your network is using it, you should disable Incoming Mail. Disabling Cancel Job Button prevents users from remotely cancelling the jobs of others. Disabling Go Button prevents users from delaying or stopping the jobs of others. It is the Pause/Resume button in the MFP EWS. Command Invoke does not apply to the MFPs. Disabling it is only a best practice. Command Download does not apply to MFPs. Disabling it is only a best practice. Command Load and Execute enables the MFPs to install and run Chai services, such as workflow applications and job accounting solutions. You should disable it unless you are using installed applications on your MFPs. Chapter 3 HP LaserJet and Color LaserJet MFP Security Checklist 49

Section	Page
HP Imaging and Printing Security Best Practices	1
Configuring Security for Multiple LaserJet MFPs and Color LaserJet MFPs	1
Version 5.0 for HP Web Jetadmin 10.1 or above	1
Table of Contents	2
Chapter 1: Introduction	5
Cautions	6
Follow the Checklist in Order	6
Understand the Ramifications	6
Continue to be Vigilant	6
MFP Environment	7
Assumptions	7
Solutions covered	8
Organization	8
Chapter 2: Threat Model	9
Spoofing Identity	9
Tampering with Data	10
Repudiation	10
Information Disclosure	11
Denial of Service	11
Elevation of Privilege	12
Chapter 3: Basic Security for Multiple MFPs	13
Notes on the Process of Configuration	13
Using Web Jetadmin and MFP Passwords	13
Getting started configuring MFP Security Settings	15
Setting up HP Web Jetadmin	15
Configuring HP Secure Hard Disk	17
Configuring SNMPv3	20
Configuring MFP Device Settings	26
I/O Timeout to End Print Job	26
Job Hold Timeout	26
Job Retention	27
Apply the Changes	27
Configuring MFP Network Settings	29
Enable Features	29
Encrypt all Web Communication	33
Encryption Strength	34
Error Handling	35
IPX RCFG Support	35
Job Timeout	36
Privacy Setting	36
Protocol Stacks	37
Web Services Print	39
Apply your Changes	40
Configuring MFP Security Settings	41
Bootloader Password	41
Color Access Control	42
Control Panel Access	42
Embedded Web Password	43
PJL Password	44
Printer Firmware Update	45
Secure Disk Encryption Mode	45
Apply the Changes	46
Configuring MFP Fax Settings	48
Configuring Fax Printing	48
Apply the Changes	49
Additional Fax Configuration	50
Configuring MFP Embedded Web Server Settings	52
Embedded Web Server Configuration Options	52
Apply the Changes	54
Configuring MFP File System Settings	55
File System External Access	55
File System Password	56
Secure File Erase Mode	57
Apply the Changes	58
Configuring MFP Digital Sending Settings	60
Auto Reset Send Settings	60
Default From Address	61
Apply the Changes	61
Configuring Final Settings	62
Disabling Direct Ports	62
Disabling EWS Config	63
Chapter 4: Advanced Security for Multiple MFPs	65
Access Control List (ACL)	65
Authentication Manager	67
Group 1 PIN and Group 2 PIN	68
LDAP	70
User Pin Authentication	71
Chapter 5: Settings List	72
Recommended Settings	72
Initial Settings	72
Device Category Settings	72
Network Category Options	72
Security Category Options	73
Fax Category Options	73
Additional Fax Configuration	73
Embedded Web Server Page Options	74
File System Page Options	74
Digital Sending Page Options	74
Final configurations	74
Chapter 6: Default Settings:	75
Chapter 7: Ramifications	79
Initial Settings	79
Device Page Settings	80
Network Page Options	80
Security Page Options	83
Fax Page Options	85
Additional Fax Configuration	85
Embedded Web Server Page Options	85
File System Page Options	86
Digital Sending Page Options	88
Final Configurations	88
Overall Limitations	89
Chapter 8: Physical Security	90