|
Xerox® Security Guide for Entry Production Color Class ProductsMarch 2019 Page 2-8User Data in TransitThis section focuses on the protection of user data (print/scan/other jobs) in transit as they are submittedto the product for processing and/or are sent from the product to other systems. Additional protectionsare also discussed in the Network Security section of this document.Inbound User DataPrint Job SubmissionIn addition to supporting network level encryption including IPSec and WPA, Xerox products also supportencryption of print job data at the time of submission. This can be used to securely transmit print jobsover unencrypted connections or to enhance existing network level security controls.Encrypted Transport DescriptionIPPS (TLS) Submit print jobs via Secure Internet Printing Protocol. This protocol isbased on HTTP and utilizes the TLS suite to encrypt data.HTTPS (TLS) Securely submit a print job directly to product via the built-in web server.Xerox Print StreamEncryptionThe Xerox Global Print Driver® supports document encryption whensubmitting Secure Print jobs to enabled products. Simply check the box toEnable Encryption when adding the Passcode to the print job.Outbound User DataScanning to Network Repository, Email, Fax ServerVersant® digital press products support scanning of hardcopy documents to external network locationsincluding file repositories and email and facsimile services. In addition to supporting network levelencryption including IPSec and WPA, Xerox products support the following:Protocol Encryption DescriptionHTTP N/A Unencrypted HTTP protocolHTTPS (TLS) TLS HTTP encrypted by TLSFTP N/A Unencrypted FTPSFTP (SSH) SSH FTP encrypted by SSHSMBv3 Optional Encryption may be enabled on a Windows share.Versant® and ColorPress® products currently support SMBencryption.SMBv2 N/A Unencrypted SMBSMBv1 N/A Not used as a transport protocol. Used for network discovery only.SMTP (email) S/MIME The product uses SMTP to transmit data to the email server. Emailauthentication, encryption, and signing are supported. Please referto the Network Security section of this document for details.Scanning to User Local USB Storage ProductScan data is transferred directly to the user’s USB product. Filesystem encryption of user products arenot supported.
PreviousNext |