16 EVALUATOR GUIDEXerox Security allows you to restrict access, trackusage, and protect confidential data that flows throughdevices. This is accomplished through intelligent designarchitecture, complying with stringent industry securitystandards and increasing regulations in the government,military, health care (HIPAA), accounting practices law(Sarbanes-Oxley), financial (Gramm-Leach-Bliley Act),and pharmaceutical (FDA 21 CFR Part 11) sectors.These devices will support IPsec and a security auditlog, and provide a certified separation of fax andnetwork. Our common criteria certifies the entiredevice, not just a kit.1. Accountability• Audit Log for systems administrators• Print/Copy/Scan/Fax events and time stamps• Xerox Standard Accounting tracks copy, scan (including filingand email), print and fax usage by user. Can also be used forauthorization to restrict access.• Network Accounting feature integrated with a 3rd Party XeroxBusiness Partner; you control access and track usage on acentralized basis. You can get up-to-date information on how theWorkCentre Pro is being used by account and user, includingtime and date of the activity.1. Does the device have the accountability and security features to meet youroffice requirements?2. Does the device provide separation between the fax telephone line andthe network?3. Can the device access be protected by a password?4. Does the device provide user authentication and authorization?5. Does the device remove latent images on disk drives and in memory?6. Are all network communications paths to and from the device encrypted?EVALUATE SECURITY CAPABILITIESHOW THE XEROX COPYCENTRE, WORKCENTRE AND WORKCENTRE PRO232/238/245/255/265/275 EXCEED THE SECURITY REQUIREMENTMEETS EXCEEDSWorkCentre/WorkCentre Pro 200series enhanced security features*Scan to MailboxScan to HomeLinearized PDFStore Print & Reprint802.1x protocolDisk EncryptionImage Overwrite SchedulingSecure LDAP AuthenticationAS400 PrintingXerox Extensible Interface Platform*Not available on Common Criteria Certified configuration.Common Criteria Certified configuration available in the U.S.