Xerox 701P46740 manual Security warning banners, Disabling LP anonymous printing

Page 17

Security warning banners

Security warning banners are displayed when a user logs in or telnets into the Xerox FreeFlow Print Server. This message explains that only authorized users should be using the system and that any others face the possibility of being monitored by law enforcement officials.

NOTE: DRW (Xerox FreeFlow Print Server Remote Workflow) is not impacted by security settings.

Disabling LP anonymous printing

You can choose to disable anonymous printing on all existing LP printer queues that are associated with the Xerox FreeFlow Print Server virtual printers. When anonymous LP is disabled, only systems that have their IP address in the Xerox FreeFlow Print Server controller /etc/hosts table are authorized to submit LP requests. Answer “y” for yes to disable this printing option.

Remote shell internet service

If you are using the legacy Xerox print command line client (the software is not distributed with this release), you will need to use the remote shell internet service to transfer files to the Xerox FreeFlow Print Server controller. However, if you are not using the Xerox print command line client, it is strongly recommended that the remote shell internet service is disabled. When these three questions are answered, all remaining aspects of the "High" security setting are implemented.

enable-ftp and disable-ftp

These options allow for temporary enabling and disabling FTP alone. Will not persist through reboots. You must have FTP enabled when using a Continuous Feed system, or FreeFlow® Production Print and NetAgent.

FTP is also required for the Call for Assistance (CFA) feature. This uses FTP to push IOT logs and a Xerox FreeFlow Print Server outload back to the Print Server controller.

NOTE: Temporarily enable FTP through the Xerox FreeFlow Print

Server Setup > FTP/Remote Diagnostics menu option.

Security Guide

13

Image 17
Contents Security Guide USA Table of contents Table of contents Conventions ContentsAbout this guide Customer support System supplied security profiles SecurityFTP CD-ROMBSM Enable and disable servicesS40LLC2 S72AUTOINSTALLS47ASPPP S70UUCPS17HCLNFS.DAEMON S15NFS.SERVERS76SNMPDX S77DMISecurity Guide Security Guide User level changes Multicast routing disabled Disabling secure name service databasesSolaris file permissions OS and host information hiddenRemote CDE login disabled Executable stacks disabledXerox FreeFlow Print Server router capabilities disabled Sendmail daemon securedEnable-ftp and disable-ftp Remote shell internet serviceSecurity warning banners Disabling LP anonymous printingAccount management Setting the current and default profilesCreating user-defined profiles Local users and groupsDefault user groups and user accounts Creating user accounts Group authorizationCDS MED CD-ROMAuto-Logon Password security Default Screen/Auto-LogoffHow to Enable/Disable Strong Password Strong PasswordsGUI Logging Audit LogsDate/Time User Login/Logout Accessing the Xerox FreeFlow Print Server through ADSChanging individual passwords User Activity on the SystemIP Filtering Limiting accessRemote Workflow Using the Print Server SSL/TLS Security FeatureSecure Socket Layer Isgw Creating and Using a Self-Signed CertificateSecurity Guide Digital Certificates Network ProtocolIPP HttpSnmp WinsSecure Print Micr modeSSL NFSRoles and responsibilities Prevent Unauthorized Queue ChangesQueue Lock Xerox responsibilitiesCustomer Responsibilities Security tipsOnline Help for security Virus Scan