|
Security Guide 29NOTE: The IP Filtering (Setup->IP Filter) feature can also help inlimiting access to the server. This is the Xerox FreeFlow PrintServer's GUI interface to the SunScreen Lite firewall that is part ofthe Solaris 8 Operating System. This feature allows the user tolimit the number of clients who are allowed to access the servervia services such as LPR, IPP, HTTP, HTTPS, SMB Printing, andFTP. By default, the firewall is disabled (all ports open), but can beenabled to either only allow specified connections (by IP address,IP address range, or subnet mask) or to close all ports. For DRWclients, this mechanism exists under System Preferences ->Remote Workflow -> "Enable Specified Connections".NOTE: FreeFlow® v2.0 and newer allows users to select whetheror not the Xerox FreeFlow Print Server server they connecting towill have high security enabled. If so, the client will use othercommunication paths such as sIPP (via SSL) for job submissionsand sFTP for decomposition services (NetAgent).Secure PrintMICR modeThe MICR mode disables all Xerox FreeFlow Print Server featuresthat allow additional prints to be produced (such as Sample Print,Reposition Output, etc.).FTP Access the server via FTP and/or submit jobs from a DigiPath/FreeFlow client via the Digipath/FreeFlow Print Manager. Thisservice (ftpd) is shutdown when Xerox FreeFlow Print Serversecurity is set to high. In FreeFlow v2.0, the client has the abilityto use secure FTP (sFTP) when Xerox FreeFlow Print Serversecurity is set to high and FTP is not available. Connectionscan also be filtered using the IP Filter feature under Setup ->Security Profiles -> -> RPC tab.SSL Required when using the TLS/SSL security feature and/or aFreeFlow 2.0+ client with Xerox FreeFlow Print Server securityis set to high. Connections can also be filtered using the IPFilter feature under Setup -> IP Filter.NFS Necessary when using NFS mounted directories. This serviceis disabled when Xerox FreeFlow Print Server security is set tohigh. Connections can also be filtered using the IP Filter featureunder Setup -> Security Profiles -> -> RPC tab.NetworkProtocol Required
PreviousNext |