HP Commercial LaserJet Printers and MFPs - Imaging and Printing Security Best Practices

Chapter 7 HP LaserJet and Color LaserJet MFP Security Checklist 78
 Enable HTTPS, and configure the setting to Encrypt all web communication. This setting
enables encryption for configuration data between the PC and the MFP EWS. It prevents
sensitive data such as usernames and passwords from passing over the network in clear text.
This setting is related to the EWS Encryption Strength setting explained earlier.
Web browsers that do not support SSL and high encryption strength will not be able to access
the MFP EWS.
This checklist recommends disabling EWS Config during normal MFP operations and enabling
it temporarily for changes to configurations. This setting ensures that the network traffic is
secure during those configurations.
 Disable IPX RCFG Support. The IPX RCFG Support setting (sometimes called RCONFIG)
allows remote configuration from IPX/SPX servers. Web Jetadmin may use RCFG to configure
Novell NetWare queue-server linkages on older Jetdirect print servers. You should disable IPX
RCFG Support unless your network has Novell and older Jetdirect print servers.
With IPX RCFG Support disabled, MFPs will deny access to Novell.
When you click Apply for this setting, a caution message will appear to alert you that you are
disabling certain types of Novell access. Click OK to go ahead with disabling it.
 Configure Job Timeout. The Job Timeout option enables the MFPs to move on from jobs
that lack proper end of job signals. The MFPs will be able to switch protocols to continue with
other jobs rather than waiting indefinitely for improperly formatted jobs to finish.
 Set the Privacy setting as desired. The Privacy setting is included in this checklist to inform you
of its purpose: it allows HP to collect statistical data on the use of MFPs. HP uses such
information to help improve the design and development of MFPs. HP will not collect network-
specific or personal data. For information on HP privacy policies, read the Hewlett-Packard
Online Privacy Statement available by clicking privacy statement at http://www.hp.com.
If you enable this feature, information collected by HP will be limited to the following items:
 HP Jetdirect product number, firmware version, and manufacturing date
 Model number of the attached printer or device
 Web browser and operating system detected
 Local language selections used for viewing Web pages
 Network communications protocols enabled
 Network management interfaces enabled
 Device discovery protocols enabled
 Printing protocols enabled
 TCP/IP configuration methods enabled
 SNMP control methods enabled
 Wireless configuration methods enabled
For HP to collect any information, Internet access must be available.