Best Practices for Securing Printers
This document describes Best Practices for securing printers. The bulk of printers on campus are HP printers so the documentation reflects that. If you have other brands of printers, you will have to use the manufacturer’s tools to set security. While the tools might be different, the principals are the same no matter what brand of printer you are using.
Firmware
Keeping the firmware up to date from the vendor is the best way to keep current on both security and device enhancements. With HP printers, the HP Download Manager is the best way to update firmware. You can get the HP Download Manager from HP’s web site. If you need help learning to use Download Manager, please contact ITS Enterprise File & Print.
Tools
There are a couple of ways to configure your printers. You can either use the vendors client tool (HP uses Web Jet Admin) or you can use browser and go to http://128.255.x.x (the IP address of the printer). This will give you many of the same features that the client tool will give you. If you are just working with a few printers, using the browser to set the configuration is probably the easiest thing to do. You will see different features on different printers. If you do not see a feature listed, the printer most likely does not have that feature due to its age.
General Recommendations
General recommendations are as follows:
-
Set a Device Password
-
Put a Description and Contact in for each printer
-
Turn off all unused protocols – including IPX/SPX, AppleTalk, DLC/LLC
-
Disable unused features – including Telnet, SLP, FTP, IPP, MDNS and IP v4 multicast
-
Set ACL’s – set your printers to allow traffic from the University of Iowa campus only
-
Encrypt web communication
Configuration Instructions
Configure a Network Printer - HP Web JetAdmin
