HP PageWide Pro 577dw Printing Security Best Practices: Configuring a Printer - Page 46

Network Options, Enable Job Storage Limit.

Page 46 highlights

jobs that are deleted after the timeout period. Jobs are deleted securely according to the Secure File Erase setting (appears later in this checklist). • Enable Job Retention. Job Retention is a feature of the MFP that saves fax or print jobs on the hard drive for printing when the user is present. The security implication is that a user can be sure others will not be able to see the printed documents. For printing, a user sets the PIN at the time of sending the print job to the MFP. For fax printing, the PIN is configured for all incoming jobs using Web Jetadmin. The MFP will require the PIN number at the control panel before it will print the job. Configuring Job Retention enables more efficient use of the MFP memory. Thus, you should configure Job Hold Timeout and other related settings. • Enable Job Storage Limit. Job Storage Limit when enables is set to a default of 32. Adjust accordingly to your print job needs. NOTE: Stored faxes are not affected by the Job Hold Timeout. Network Options • Disable ePrint. Unless ePrint, HP Web Services, or other applications are a critical part of your print environment we recommend disabling these features. If you are using the ePrint enterprise server and not the HP cloud for ePrint you should refer to your administrators guide for any special settings that may be required to secure your solution. • Configure Enable Features options. These options enable or disable various supported features for the MFP. These features are designed for access and convenience on the network, but they should be disabled when not in use (sometimes only for best-practice control of the networking capabilities). The following list explains the ramifications of each feature: • Disable SLP Config. SLP Config accommodates software using SLP as a discovery mechanism. For example disabling SLP Config on some Novell networks (depending on how Novell is configured) would cause Novell to not recognize the MFPs on the network. Thus, if your network uses these features of Novell, you should enable SLP Config. If you use software other than HP Web Jetadmin with your HP MFPs please test this feature before disabling it. HP Web Jetadmin is not affected by this setting. • Disable LPD Printing. LPD Printing is the protocol necessary for printing in UNIX, HPUX, or Linux environments. You should disable LPD Printing unless your network includes UNIX workstations that might print using the MFPs. With this option disabled, MFPs will deny access to UNIX machines. • Enable 9100 Printing. 9100 Printing should always be enabled. It is the standard printing protocol used by MFP print drivers. Disabling 9100 Printing would disable all printing for most users. • Disable AirPrint. AirPrint Printing is a protocol for printing from Apple devices. Unless your network environment supports AirPrint, we recommend keeping this feature disabled. • Disable IPP Printing. IPP Printing is a protocol for printing over the Internet or locally. Unless you have a requirement for IPP printing it should be disabled. With it disabled, the MFPs will deny access to direct printing from the Internet. Print jobs generated from web browsers using the installed print driver are not affected. 42

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52

42
jobs that are deleted after the timeout period. Jobs are deleted securely according to the Secure File
Erase setting (appears later in this checklist).
Enable Job Retention.
Job Retention is a feature of the MFP that saves fax or print jobs on the hard
drive for printing when the user is present. The security implication is that a user can be sure others will
not be able to see the printed documents. For printing, a user sets the PIN at the time of sending the
print job to the MFP. For fax printing, the PIN is configured for all incoming jobs using Web Jetadmin.
The MFP will require the PIN number at the control panel before it will print the job. Configuring Job
Retention enables more efficient use of the MFP memory. Thus, you should configure Job Hold Timeout
and other related settings.
Enable Job Storage Limit.
Job Storage Limit when enables is set to a default of 32. Adjust accordingly to
your print job needs.
NOTE:
Stored faxes are not affected by the Job Hold Timeout.
Network Options
Disable ePrint.
Unless ePrint, HP Web Services, or other applications are a critical part of your print
environment we recommend disabling these features. If you are using the ePrint enterprise server and
not the HP cloud for ePrint you should refer to your administrators guide for any special settings that
may be required to secure your solution.
Configure Enable Features options
. These options enable or disable various supported features for the
MFP. These features are designed for access and convenience on the network, but they should be
disabled when not in use (sometimes only for best-practice control of the networking capabilities). The
following list explains the ramifications of each feature:
Disable SLP Config
. SLP Config accommodates software using SLP as a discovery mechanism. For
example disabling SLP Config on some Novell networks (depending on how Novell is configured)
would cause Novell to not recognize the MFPs on the network. Thus, if your network uses these
features of Novell, you should enable SLP Config. If you use software other than HP Web Jetadmin
with your HP MFPs please test this feature before disabling it. HP Web Jetadmin is not affected by
this setting.
Disable LPD Printing
. LPD Printing is the protocol necessary for printing in UNIX, HPUX, or Linux
environments. You should disable LPD Printing unless your network includes UNIX workstations
that might print using the MFPs. With this option disabled, MFPs will deny access to UNIX machines.
Enable 9100 Printing
. 9100 Printing should always be enabled. It is the standard printing protocol
used by MFP print drivers. Disabling 9100 Printing would disable all printing for most users.
Disable AirPrint.
AirPrint Printing is a protocol for printing from Apple devices. Unless your network
environment supports AirPrint, we recommend keeping this feature disabled.
Disable IPP Printing
. IPP Printing is a protocol for printing over the Internet or locally. Unless you
have a requirement for IPP printing it should be disabled. With it disabled, the MFPs will deny
access to direct printing from the Internet. Print jobs generated from web browsers using the
installed print driver are not affected.