Canon printer imageCLASS MF249dw User Manual

DisablingHTTPCommunication
1469-084
HTTP is used for communications over the network, such as when you access the machine via the Remote UI. If you are using a USB connection or are otherwise not using HTTP, you can disable HTTP to block malicious third-partyintrusions via the unused HTTP port.
Disabling HTTP disables some of the network capabilities, such as the Remote UI, WSD printing, and printingwith Google Cloud Print.
1TapintheScreen.2Tap.
	 If a screen for entering a PIN is displayed,...

DisablingRemoteUI
1469-085
The Remote UI is useful because the machine settings can be  speci4ed by using a Web browser on a computer. To use
the Remote UI, the machine must be connected to a computer over the network. If you do not need to use the Remote
UI, you might want to disable the Remote UI to reduce the risk of having your machine controlled remotely over the
network by malicious third parties.
1TapintheScreen.2Tap.
	 If a screen for entering a PIN is displayed, enter the PIN with the...

ImplementingRobustSecurityFeatures
1469-086
Authorized users may incur unanticipated losses from attacks by malicious third parties, such as  sniwng, spoo4ng,
and tampering of data as it  5ows over a network. To protect your important and valuable information from these
attacks, the machine supports the following features to enhance security and secrecy.
TLSEncryptedCommunication
TLS is a protocol for encryption for data sent over a network and is often used for communication via a Web
browser...

EnablingTLSEncryptedCommunicationfortheRemote
UI
1469-087
You can encrypt communication between the machine and a Web browser on the computer by using Transport Layer Security (TLS). TLS is a mechanism for encrypting data sent or received over the network. TLS must be enabled when
the Remote UI is used for specifying settings for IEEE 802.1X authentication (TTLS/PEAP) or SNMPv3. To use TLS for the
Remote UI, you need to set a key pair and enable the TLS function. Generate or install the key pair...

4Click[KeyandCertL4cate@in[TLS[email protected][RegisterDefaultKey@ontherightofthekeypairyouwanttouse.
Viewingdetailsofa certL4cate
	 You  can  check  the  details  of  the  certi4cate  or  verify  the  certi4cate  by  clicking  the  corresponding  text  link
under [Key Name], or the  certi4cate icon. 
VerifyingKeyPairsandDigital CertL4cates(P.446)
6EnableTLSfortheRemoteUI.1Click [Security Settings]  [Remote UI Settings].2Click [Edit].
Security
427    

3Select the [Use TLS] check box and click [OK].Usingtheoperationpanel	 You can also enable or disable TLS encrypted communication from  in the  screen. 
Use
TLS(P.531)
StartingtheRemoteUIwithTLS 	 If you try to start the Remote UI when TLS is enabled, a security alert may be displayed regarding the
security  certi4cate.  In this case, check that the correct URL is entered in the address  4eld, and then proceed
to display the Remote UI screen. 
StartingRemoteUI(P.450)...

Con4gurLngIEEE802.1XAuthentication
1469-088
The machine can connect to an 802.1X network as a client device. A typical 802.1X network consists of a RADIUS server (authentication server), LAN switch (authenticator), and client devices with authentication software (supplicants). If adevice tries to connect to the 802.1X network, the device must go through user authentication in order to prove that the connection is made by an authorized user. Authentication information is sent to and checked by a...

3Click[NetworkSettings@[IEEE802.1X[email protected][[email protected]the[UseIEEE802.1X@checkbox,entertheloginnameinthe[LoginName@text
box,andspecifytherequiredsettings.
[UseIEEE802.1X@
Security
430 

Select the check box to enable IEEE 802.1X authentication.[LoginName@
Enter up to 24 alphanumeric characters for a name (EAP identity) that is used for identifying the user.
SettingTLS
1Select the [Use TLS] check box and click [Key and  Certi[email protected] [Register Default Key] on the right of the key pair you want to use for the client authentication.
ViewingdetailsofakeypairorcertL4cate
	 You can check the details of the  certi4cate or verify the  certi4cate by clicking the corresponding...

2Click [Change User Name/Password].	 To specify a user name other than the login name, clear the [Use Login Name as User Name] check
box. Select the check box if you want to use the login name as the user name.3Set the user name/password and click [OK].
[UserName@
Enter up to 24 alphanumeric characters for the user name.
[ChangePassword@
To set or change the password, select the check box and enter up to 24 alphanumeric characters for the new password both in the [Password] and  >Con4rm@ text boxes....