Xerox 3550 manual Purpose, Target Audience, Disclaimer

Page 5

XEROX WorkCentre 3550 Information Assurance Disclosure Paper

1. Introduction

The WorkCentre 3550 multifunction systems are among the latest versions of Xerox copier and multifunction devices for the general office.

1.1. Purpose

The purpose of this document is to disclose information for the WorkCentre products with respect to device security. Device Security, for this paper, is defined as how image data is stored and transmitted, how the product behaves in a networked environment, and how the product may be accessed, both locally and remotely. Please note that the customer is responsible for the security of their network and the WorkCentre products do not establish security for any network environment.

The purpose of this document is to inform Xerox customers of the design, functions, and features of the WorkCentre products relative to Information Assurance (IA).

This document does NOT provide tutorial level information about security, connectivity, PDLs, or WorkCentre products features and functions. This information is readily available elsewhere. We assume that the reader has a working knowledge of these types of topics. However, a number of references are included in the Appendix.

1.2. Target Audience

The target audience for this document is Xerox field personnel and customers concerned with IT security.

1.3. Disclaimer

The information in this document is accurate to the best knowledge of the authors, and is provided without warranty of any kind. In no event shall Xerox Corporation be liable for any damages whatsoever resulting from user's use or disregard of the information provided in this document including direct, indirect, incidental, consequential, loss of business profits or special damages, even if Xerox Corporation has been advised of the possibility of such damages.

 

5

Ver. 1.3, March 2011

Page 5 of 32

Image 5
Contents Prepared by Ver .3, March Device Description Target AudienceSecurity Aspects of Selected Features Disclaimer PurposeTarget Audience Device Description Physical Partitioning Security-relevant SubsystemsSecurity Functions allocated to Subsystems Security Functions allocated to SubsystemsPurpose ControllerMemory Components Controller memory componentsUSB Ports External ConnectionsController External Connections USB PortsScanner Fax ModuleHardware Fax Module memory componentsUser Interface memory components Local User Interface LUIControl and Data Interfaces OS Layer in the Controller System Software StructureOpen-source components IPv4 Network Protocol Stack Network ProtocolsIPSec Logical AccessPort 25, Smtp PortsPort 53, DNS Network PortsPort 80, Http Port 68, DhcpPort 88, Kerberos Ports 137, 138, 139, NetbiosPort 389, Ldap Ports 161, 162, SnmpPort 396, Netware Port 427, SLPIP Filtering Login and Authentication Methods Authentication ModelSystem Administrator Login All product configurations User authenticationSMB Authentication with IP Address SMB Authentication Windows NT 4 or Windows 2000/WindowsDdns SMB Authentication with HostnameSystem Accounts DiagnosticsPrinting Multifunction models only Network Scanning Multifunction models onlyMeter Assistant SMart eSolutionsSupplies Assistant SummaryResponses to Known Vulnerabilities Electrically erasable programmable read only memory Appendix a AbbreviationsIPSec Ldap ServerWebUI UDPRFC 1759 Printer MIB Group WorkCentre Appendix B Supported MIB ObjectsSnmp version / Network Transport support WorkCentre RFC 1213 MIB-II for TCP/IP group WorkCentre RFC 1514 Host Resources MIB group WorkCentreAdditional Capabilities / Application Support WorkCentre Supported MIB ObjectsController Software Printing Description Languages Controller SoftwareRFC/Standard Appendix E References