IEEE 802.1X
Canon imageRUNNER ADVANCEsystems support IEEE 802.1x, which is a standard protocolfor port-
based NetworkAccess Control. The protocol provides authentication to devicesattached to a LAN port
and establishesa point-to-point connection only if authentication is successful. The Extensible
Authentication Protocol(EAP) is attached to both wired and wireless LAN networks, allowing multiple
authentication methodssuch as cards and one-time passwords.
IEEE802.1X functionality is already supported by many Ethernet switches, and can prevent guest,
rogue, or unmanaged systemsthat cannot perform a successful authentication from connecting to
your network.
SNMP CommunityString
CommunityStrings are like passwords for the management elements of networkdevices. There is a
communitystring which is used for read-only access to a network element. The defaultvalue for
thiscommunity string for most network devices is often "public". Using thiscommunity string an
application can retrieve data from the imageRUNNER ADVANCEsystem’s Management Information
Base (MIB) elements. There isalso a read-write community string, and its default value is usually
“private.” Using the read-write communitystring, an application can actually change valuesfor
MIB variables.
Canon imageRUNNER ADVANCEsystems use public and private as the defaultSNMP community
strings, butthese may be renamed to a user-defined value for increased security. In addition,
the systemssupport SNMPv3, which provides greater security by protecting data against tampering,
ensuring accessis limited to authorized users through authentication and encrypting data sent
over a network.
To modifySNMP community strings go to Settings / Registration > Preferences> Network > SNMP
Settings.
USB Block
Administratorshave complete control over enabling or disabling accessto the imageRUNNER
ADVANCEsystem’s USB port, and can independently control the ability to connect to computers or
plug-in peripherals.
FFoorr mmoorree iinnffoorrmmaattiioonn oonn tthhee UUSSBB BBlloocckk ffeeaattuurree,, pplleeaassee rreeffeerr ttoo tthhee

DDeevviiccee SSeeccuurriittyy

sseeccttiioonn..
Scan and Send - VirusConcerns for E-mail Reception
For imageRUNNER ADVANCEsystems with Scan and Send capabilities enabled, the device willalways
discard anyattached viruses in e-mail messages upon receipt.
Scan and Send-enabled devicessupport POP3 and SMTP as e-mail reception protocols. When data is
received, the e-mailtext is separated from any file attachments, and only TIFF image files among the
attached filesare printed and transferred.
27
White Paper: Canon imageRUNNER ADVANCE Security
Section 4 – Network Security