Canon I Sensys Lbp6030w User Guide

							0HWJ-02R
Security
Confidential information  is  handled by information  devices everywhere,  including computers and  printers, and  any of these devices may
become a target for  malicious third parties at any time. Attackers may  directly  gain unauthorized access to  your devices,  or indirectly
take advantage of negligence or improper  use. Either way, you may  incur unanticipated losses when your confidential  information  is
leaked. To counter these risks,  this machine is  equipped with a variety  of security functions.  Set the  necessary  configuration depending
on  your network environment.
Establishing  the Basics of Information Security
Protecting the Machine  from Unauthorized  Access
Implementing Robust Security Features
Enabling  SSL Encrypted Communication for the Remote  UI
>Ý>Ü>Ý>Ì>Û>Ì>Þ>Ý>å
 
						

							0HWJ-02S
Protecting the Machine from Unauthorized Access
To prevent  unauthorized third parties from accessing and  using the  machine, you can implement multiple security measures, such as
setting system manager passwords,  using firewalls, and  changing  port numbers.
>Ý>Ü>Þ>Ì>Û>Ì>Þ>Ý>å
 
						

							0HWJ-02U
Setting System Manager Passwords
Administrator access rights  are  required to  change machine settings from the  Remote  UI. After logging in as an  administrator, use the
following  procedure to  set the  PIN  (system manager password).  The system manager password is  critical to  the  security of the  machine.
Make  sure  that  only system managers know the  system manager password.
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [System Management]   [Edit].
Enter  the PIN.
[Set/Change  PIN]
To set or change a PIN, select the  check  box and  enter a number of up  to  7  digits. Enter the  same number in both  in the  [PIN]
and  [Confirm]  text boxes.
You  cannot  register  a PIN  that  consists only of zeros, such as "00" or "0000000."
To clear a PIN  setting, select the  [Set/Change PIN] check  box and  click [OK]  with the  [PIN] and  [Confirm]  text boxes  empty.
Enter  the name and  contact  information  of the system  manager as necessary, and  click [OK].
1
2
3
4
5
>Ý>Ü>ß>Ì>Û>Ì>Þ>Ý>å
 
						

							[System Manager  Name]
Enter up  to  32 alphanumeric  characters  for  the  name of the  system manager.
[Contact Information]
Enter up  to  32 alphanumeric  characters  for  the  contact information  of the  system manager.
[E- Mail Address]
Enter up  to  64 alphanumeric  characters  for  the  e-mail address of the  system manager.
[System Manager  Comment]
Enter up  to  32 alphanumeric  characters  for  a comment  about  the  system manager.
>Ý>Ü>à>Ì>Û>Ì>Þ>Ý>å
 
						

							0HWJ-02W
Restricting Communication by Using Firewalls
Without  proper security,  unauthorized third parties can access computers and  other communication devices that  are  connected to  a
network. To lower the  risk of unauthorized access, you can allow communication with devices having specified IP  addresses and  r eject
communication with other devices.  Conversely, you can also  reject communication with devices having specified IP  addresses and   allow
communication with other devices.  You  can specify  a single IP  address or a range of IP  addresses.
Up to  16 IP  addresses (or ranges  of IP  addresses)  can be specified for  both  IPv4  and  IPv6. 
The communication protocols that  can be restricted  in this way  are  TCP, UDP,  and  ICMP.  
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Security  Settings]  [IP Address Filter].
Click [Edit] to specify a filter  type.
1
2
3
4
>Ý>Ü>á>Ì>Û>Ì>Þ>Ý>å
 
						

							[IPv4 Address:  Outbound Filter]
Restrict data sent from the  machine to  a computer  by specifying  an  IPv4  address.
[IPv4 Address:  Inbound Filter]
Restrict data received by the  machine from a computer  by specifying  an  IPv4  address.
[IPv6 Address:  Outbound Filter]
Restrict data sent from the  machine to  a computer  by specifying  an  IPv6  address.
[IPv6 Address:  Inbound Filter]
Restrict data received by the  machine from a computer  by specifying  an  IPv6  address.
Specify  the settings  for filtering.
As the  policy conditions, select a default  policy to  allow or reject communication between  the  machine and  other devices.  Then
specify  IP  addresses for  exceptions.
1Select the [Use Filter] check box, and  then  select a policy  with [Default  Policy].
[Use Filter]
Select the  check  box to  restrict  communication.  Clear the  check  box to  communicate without restrictions.
[Default  Policy]
As the  policy conditions, select whether  to  allow or reject other devices to  communicate with the  machine.[Reject] Select to  allow communication only when the  data is  sent to  or received from devices whose  IP
addresses are  entered  in [Exception  Addresses].  Communication with other devices is  prohibited.
[Allow] Select to  block  data that  is  sent to  or received from devices whose  IP  addresses are  entered  in
[Exception  Addresses].  Communication with other devices is  allowed.
2Specify  address exceptions.
Enter an  IP  address (or a range of IP  addresses)  in the  [Address to  Register] text box and  click [Add].
Entry format  for IP addressesTo enter a single address (IPv4)
Enter numbers  delimited  by "." (periods) (Example: "192.168.0.10").
To enter a single address (IPv6)
5
>Ý>Ü>â>Ì>Û>Ì>Þ>Ý>å
 
						

							Enter hexadecimal numbers  delimited  by ":" (colons) (Example: "fe80::10").
To specify a range  of addresses
Insert a hyphen  ("-") between  the  addresses (Examples: "192.168.0.10-192.168.0.20" "fe80::10 -fe80::20").
To specify a range  of addresses with a prefix
Enter an  address, followed by a slash  ("/") and  a number indicating  the  prefix  length (Examples: "192.168.0.32/27"
"fe80::1234/64").
When [Reject] is  selected for an outbound filter
Outgoing multicast and  broadcast packets  cannot  be filtered.
To delete an IP address that has been set
Select the  IP  address to  delete, and  then  click [Delete].
3Click [OK].
Restart the machine.
Turn  OFF  the  machine, wait  for  at least  10 seconds,  and  turn  it back ON.
6
>Ý>Ü>ã>Ì>Û>Ì>Þ>Ý>å
 
						

							0HWJ-02X
Changing Port Numbers
Ports  serve as endpoints for  communicating with other devices.  Typically, standard port numbers  are  used for  major protocols,  but
devices that  use these port numbers  are  vulnerable  to  attacks  because  these port numbers  are  well-known. To enhance security,  some
network administrators prefer  to  change the  port numbers. When  a port number has been changed, the  new number must be shared
between  communicating devices,  such as computers and  servers. If  a port number changes, set it on  this machine as well.
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Network Settings]  [TCP/IP  Settings].
Click [Edit] in [Port Number Settings].
Change the port number, and  click [OK].
1
2
3
4
5
>Ý>Ü>ä>Ì>Û>Ì>Þ>Ý>å
 
						

							[LPD]/[RAW]
Change  the  port used for  LPD  printing or RAW printing.  For details about  each protocol, see  Configuring  Printing Protocols
and  Web Services .
[HTTP]
Change  the  port used by HTTP. HTTP is  used for  communications  over the  network, such as when you access the  machine via  the
Remote  UI.
[SNMP]
Change  the  port used by SNMP.  For details about  SNMP,  see  
Monitoring  and  Controlling the Machine  with SNMP .
[WSD Multicast Discovery]
Change  the  port used for  WSD multicast discovery. For details about  WSD, see
Configuring  Printing Protocols and  Web
Services .
[Multicast Discovery]
Change  the  port used for  SLP multicast discovery. For details about  SLP, see  
Configuring  SLP  Communication with
imageWARE .
Restart the machine.
Turn  OFF  the  machine, wait  for  at least  10 seconds,  and  turn  it back ON.
LINKS
Configuring  Printer Ports
6
>Ý>Ü>å>Ì>Û>Ì>Þ>Ý>å
 
						

							0HWJ-02Y
Enabling SSL Encrypted Communication for the Remote UI
Authorized  users  may  incur unanticipated losses from attacks  by malicious third parties, such as sniffing,  spoofing, and  tampering of data
as it flows over a network. To protect  your valuable data, you can encrypt  Remote  UI communication between  the  machine and  a Web
browser  on  the  computer  by using Secure Sockets Layer  (SSL). SSL  is  a mechanism for  encrypting  data sent or received over the
network. SSL  must be enabled  when the  Remote  UI is  used to  make settings for  SNMPv3.  To use SSL  for  the  Remote  UI, you need to
set a key  pair  and  enable  the  SSL  function. Have  a key  pair  ready to  use (
Configuring  Settings  for Key  Pairs and  Digital
Certificates ).
When  you use SSL  to  encrypt  communication with the  Remote  UI, set the  time  data of the  machine. You  can use either of the
following  methods to  set the  time  data.
Use  a network time  server  to  adjust the  machine's  system clock 
Configuring  SNTP
Notify the  machine of the  currently set time  on  your computer  
Synchronizing to the time set  on  the computer
Start  the Remote UI  and  log  on in System Manager Mode.  Starting the Remote UI
Click [Settings/Registration].
Click [Network Settings]  [TCP/IP  Settings].
Click [Key and  Certificate]  in [SSL Settings].
1
2
3
4
>Ý>Ý>Ü>Ì>Û>Ì>Þ>Ý>å