Xerox 5790 Port 80, HTTP, http, server, Network Controller, machine, information, Proxy Server

XEROX WorkCentre 5735/5740/5745/5755/5765/5775/5790 Information Assurance Disclosure Paper

2.8.2.4.Port 80, HTTP

The embedded web pages communicate to the machine through a set of unique APIs and do not have direct access

Network

to machine information:

	Network Controller
		I
		n
	request	t
		e
http			request
		r
			machine
server		n
			information
	response	a
		l	response
		A
		P
		I

The HTTP port can only access the HTTP server residing in the controller. The embedded HTTP server is Apache. The purpose of the HTTP server is to:

•Give users information of the status of the device;

•View the job queue within the device and delete jobs;

•Allow users to download print ready files and program Scan to File Job Templates;

•Allow remote administration of the device. Many settings that are on the Local UI are replicated in the device’s web pages. Users may view the properties of the device but not change them without logging into the machine with administrator privileges.

The HTTP server can only host the web pages resident on the hard disk of the device. It does not and cannot act as a proxy server to get outside of the network the device resides on. Hence the server cannot access any networks (or web servers) outside of the customer firewall.

When the device is configured with an IP address, it is as secure as any device inside the firewall. The web pages are accessible only to authorized users of the network inside the firewall.

This service (and port) may be disabled in User Tools via the Local User Interface or via the TCP/IP page in the Properties tab on the WebU. Please note that when this is disabled, IPP Port 631 is also disabled.

HTTP may be secured by enabling Secure Sockets Layer.

2.8.2.4.1.Proxy Server

The device can be configured to communicate through a proxy server. Features that can make use of a proxy server include the Automatic Meter Read feature, scanning to a remote repository, or retrieving scan templates from a remote template pool.

Ver. 2.00, March 2011 Page 18 of 50