IP AddressFiltering
Using the RX/PrintSettings function, the System Manager can limit network accessto the device to
specificIP addresses or ranges for printing and Settings/Browsing. Up to eight individual or
consecutive addresssettings can be specified. Subsequently, the System Manager can also choose
to permita range of addresses, but reject specific addresses within that range.
Media AccessControl (MAC) Filtering
MACaddress filtering is useful for smaller networks where
administratorscan manage controls for specific systems, regardless of the subnet to which they
happen to be connected. For environmentsusing Dynamic Host Configuration Protocol (DHCP) for IP
addressassignments, MAC address filtering can avoid issues that are caused when DHCP leases
expire and a new IP addressis issued to a system. As with IP address filters, MAC address filters can
be used to allow or denyaccess to specific addresses. Up to 100 MAC addresses can be registered
and easilyadded, edited, or deleted through the Remote UI interface. MAC address filters take a
higher prioritythan the IP address filters; so necessary systems can be allowed or denied, even if
the system’sIP address would dictate otherwise.
SSLEncryption
Manyorganizations are quite diligent about protecting data as it is transferred between PCs and
servers or from one PCto another. However, when it comes to transmitting that same data to and
from the MFP device, itis almost always sent in clear text. As a result, it may be possible to capture
allthe data as it is sent to the printer via the network. Canon helps mitigate this dilemma by
providing Secure SocketLayer (SSL) encryption support for some transmissions to and from the
imageRUNNER device, such asInternet protocol Printing (IPP) , Internet-fax (I-fax), Remote UI, Web
Accessand DIDF.
IPv6 Support
IPv6 support, which isavailable in all imageRUNNER ADVANCE systems, provides a more secure
networkinfrastructure, improved traffic routing and easier management for administrators than IPv4.
IPSecSupport
Canon imageRUNNER ADVANCEsystems support an optional IPSec Board, which allows usersto
utilize IPSec(Internet Protocol Security) to help ensure the privacy and security of information sent to
and from the device, while in transitover unsecured networks.
IPSecis a suite of protocols for securing IP communications. IPSec supports secure exchange of
packetsat the IP layer, where the packets in the data stream are authenticated and encrypted. It
encryptstraffic so that the traffic cannot be read by parties other than those for whom it is intended,
italso ensures that the traffic has not been modified along its path and is from a trusted party,
and protectsagainst replay of the secure session. The IPSec functionality of the device only
supportstransport mode, therefore authentication and encryption is only applied to the data part
ofthe IP packets.
25
White Paper: Canon imageRUNNER ADVANCE Security
Section 4 – Network Security