Xerox 3550 manual Logical Access, Network Protocols, 5IPv6 Network Protocol Stack

XEROX WorkCentre 3550 Information Assurance Disclosure Paper

Figure 2-5 IPv6 Network Protocol Stack

2.8.Logical Access

2.8.1.Network Protocols

The supported network protocols are listed in Appendix C and are implemented to industry standard specifications (i.e. they are compliant to the appropriate RFC) and are well-behaved protocols. There are no ‘Xerox unique’ additions to these protocols.

2.8.1.1.IPSec

The device supports IPSec tunnel mode. The print channel can be secured by establishing an IPSec association between a client and the device. A shared secret is used to encrypt the traffic flowing through this tunnel. SSL must be enabled in order to set up the shared secret.

When an IPSec tunnel is established between a client and the machine, the tunnel will also be active for administration with SNMPv2 tools (HP Open View, etc.), providing security for SNMP SETs and GETS with an otherwise insecure protocol. SNMP Traps may not be secure if either the client or the device has just been rebooted. IP Filtering can be useful to prevent SNMP calls from non-IPSec clients.

Once an IPSec channel is established between two points, it stays open until one end reboots or goes into power saver,. Only network clients and servers will have the ability to establish an IPSec tunnel with the machine. Thus

	15
Ver. 1.3, March 2011	Page 15 of 32