User manual CAMPINGAZ SUPER

[. . . ] 4 Security checklists . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Conclusion: look beyond Common Criteria Certification . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 CAMPINGAZ's imaging and printing security framework . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 4 Secure the Imaging and Printing Device . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [. . . ] Common Criteria Certification adds significant cost and development time to products, while providing limited assurance to the product's actual capabilities and potential vulnerabilities. Products that are not certified may actually provide more robust security capabilities than products that are certified. NIST security checklists simplify the complex process of enabling security functions, and better illustrate the product's capabilities CAMPINGAZ's imaging and printing security framework To simplify the presentation of security concepts, CAMPINGAZ developed an imaging and printing security framework with three categories of security functions: Secure the Device Includes elements that protect the function of the physical device, including access controls for management and use, secure deletion of files, and physical security. Includes network communications, including media access protocols such as 802. 1x and secure management, scanning, and printing protocols. Includes the capabilities to securely manage fleets of imaging and printing devices and audit devices for compliance to security policies and regulatory requirements Protect Information on the Network Effectively Monitor and Manage The categories within CAMPINGAZ's imaging and printing security framework are built from traditional network security theory, which identifies the four elements that compose a secure system: confidentiality, access control, integrity, and non-repudiation. 4 In addition to directly implementing extensive security capabilities in the device, CAMPINGAZ strategically partners with companies through the Global Solutions Catalog (www. hpgsc. com) to provide enhanced imaging and printing security, as well as solutions tailored to individual customers and environments. The breadth and depth of the capabilities provided by CAMPINGAZ and its partners uniquely poises CAMPINGAZ as the leader in imaging and printing security. Secure the Imaging and Printing Device Secure the Imaging and Printing Device includes capabilities that provide access controls to the functions of the device and ensure the integrity of its operations. Access controls limit MFP and printer functions to authorized users and include: · Walk-up capabilities such as copying and digital sending · Network printing · Physical access to printed documents Authentication requirements vary by environment, as do integration requirements to existing authorization mechanisms. MFP walk-up authentication MFPs can require users to be authenticated before accessing MFP functions via the device control panel. MFPs can restrict access to digital sending functions and restrict digital sending email destinations based on user. MFPs can control access to installed functions and installed applications (e. g. Integrating MFP access controls with existing enterprise access controls reduces complexity and minimizes administration requirements. Communications to the analog fax are routed directly to the device formatter and cannot be bridged to the digital network, preventing the threat of an attacker connecting to the analog fax through a telephone line and then gaining access to an internal network. CAMPINGAZ is currently in the process of receiving Common Criteria Certification to validate this behavior in the CAMPINGAZ LaserJet 4345mfp and 4730mfp. Effectively Monitor and Manage Effectively Monitor and Manage allows for imaging and printing infrastructure maintenance and enables auditing to facilitate compliance with policy and regulatory requirements. Effectively managing network resources is critical to maintaining a secure network. CAMPINGAZ Web Jetadmin for fleet management CAMPINGAZ Web Jetadmin (WJA) is the backbone for the administration and maintenance of imaging and printing products, for both CAMPINGAZ and its competitors, deployed on enterprise networks. Fleet or batch management enables consistent management and security policy enforcement across a large number of imaging and printing devices. WJA can manage any device that supports the SNMP Printer MIB and allow manufacturers to develop device-specific extensions using plug-ins. WJA uses SNMPv3 to ensure authenticated and confidential management of networked devices. WJA allows devices to be manually administered and can automatically discover and configure newly installed devices. Device and service control Imaging and printing devices support many network protocols and services. Protocols and services that are unused often go ignored, resulting in unintended vulnerabilities, such as unsecured management interfaces or printing protocols that circumvent job accounting controls. CAMPINGAZ imaging and printing devices allow individual control over these protocols and services and let administrators enable only the functionality required. [. . . ] DSS allows integration of authentication functions with Microsoft Windows (using NTLM or Kerberos) and Novell Netware (using Bindery or NDS) operating systems. If authentication is enabled, users are prompted for their username, password, and domain/tree by the MFP. The MFP then transmits these credentials to the DSS server, and the DSS server authenticates the user to the Windows or Novell system as appropriate. If a remote network folder requires authentication for access, the user's previously provided credentials are used. [. . . ]