HP Commercial LaserJet Printers and MFPs - Imaging and Printing Security Best Practices

Chapter 2 HP LaserJet and Color LaserJet MFP Security Checklist 7
 Install Jetdirect 635n Print Servers or enable embedded IPSec to encrypt the data stream to
include log data and file metadata (look for this product at hp.com or contact your hp
product supplier).
 Close unused ports and protocols.
 Save copies of log data at a separate location
 Add security solutions such as smartcard, swipe-card and thumbprint readers
Information Disclosure
Information disclosure is gathering information from an MFP and providing it to unauthorized users.
This can include authentication information, usage log information, or information from the contents
of a job. Such data stored on your hard drive is considered ‘at rest’ while data being transmitted
by your MFP device is considered ‘in transit’. Here are some ways information disclosure can relate
to an MFP:
 Reading stored print jobs on the MFP hard drive.
 Downloading log information
 Downloading address books
 Intercepting print jobs, copy jobs, fax jobs, or digital send jobs (such as email).
You can minimize the risks of information disclosure in the following ways:
 Enable IPSec to protect data in transit. Although some devices include this feature
embedded, you may need to install an HP Jetdirect 635n (wired) or HP Jetdirect 690n
(wireless) Print Server accessory. (Look for this product at hp.com or contact your HP
product supplier).
 Use hardware encryption to protect data at rest. Some devices may include an encrypted
disk. If not, you can add an HP Secure Hard Disk accessory to protect data stored on your
MFP. (Look for this product at hp.com or contact your HP product supplier).
 Close unused ports and protocols.
 Configure all possible password settings.
 Configure authentication.
 Configure SNMPv3 for Web Jetadmin.
Denial of Service
Denial of service is any type of interference with normal use of an MFP. This can include any of the
following:
 Canceling or pausing the print jobs of others
 Turning off the MFP remotely
 Disconnecting power to the MFP
 Removing the MFP formatter board
 Disconnecting the MFP from the network