Xerox 701P46740 User Manual

Xerox FreeFlow® Print ServerSecurity GuideVersion 6.0, January 2007701P46740

6 Security GuideTable 2-3 “INIT” tab RC2 section Secure Network SettingsSecure Sendmail Force sendmail to only handle outgoing mail. No incoming mail

Security Guide 7Table 2-4 “INIT” tab RC3 section Table 2-5 “INETD” tab slpuucpRC2 Service DescriptionRC3 Service DescriptionS15NFS.SERVER NFS Server

8 Security Guidedaytime Daytime Protocol serverDisplays the date and time. Used primarily for testing. Not used by the Xerox FreeFlow Print Server.dis

Security Guide 9name DARPA trivial name serverin.tnamed is a server that supports the DARPA Name Server Protoco. Seldom used anymore. Not used by Xero

10 Security GuideUser level changesThe following user-level changes are made:• all users for at, cron, and batch are disallowed• nuucp account is disa

Security Guide 11Solaris file permissionsSecure File Permission options can be enabled or disabled through the Xerox FreeFlow Print Server interface.

12 Security GuideNOTE: All of these services are prohibited with a 'high' security setting, but if they are re-enabled manually the hostname

Security Guide 13Security warning bannersSecurity warning banners are displayed when a user logs in or telnets into the Xerox FreeFlow Print Server. T

14 Security GuideCreating user-defined profilesTo create a customized profile, the administrator can copy and edit any security profile according to t

Security Guide 15between 2-8 characters in length and is case sensitive.• The user name is a string of characters from the set of alphabetic character

Prepared by:Xerox CorporationGlobal Knowledge and Language Services800 Philips Road Bldg. 845-17SWebster, New York 14580USA©2007 by Xerox Corporation.

16 Security GuideCreating user accountsThe Xerox FreeFlow Print Server user interface enables the Administrator to manage accounts easily by selecting

Security Guide 17Reprint ManagementEnabled Enabled Enabled No The ”Limit Print Service Paths” in Security Profile controls the directories that users

18 Security GuideAuto-LogonThe Automatic Logon feature enables or disables the ability of users to directly access the Xerox FreeFlow Print Server, in

Security Guide 19Default Screen/Auto-LogoffUnder [Setup/System Preferences/Default Screen], any member of the operator or system administrators group

20 Security GuideNOTE: Please be aware that Xerox Customer Support Personnel must have access to the new root password for service and support. It is

Security Guide 21function will only apply to failed login attempts via the Xerox FreeFlow Print Server UI and does not apply to the root (su) user. Ho

22 Security GuideUser Activity on the SystemWhen the High security profile is enabled, the Solaris Basic Security Module (BSM) is activated. Date/Time

Security Guide 232. Select the ADS tab, and enter in the fully qualified domain name of the ADS domain.3. Click “Join…” button to join the Xerox FreeF

24 Security GuideSpecified Connections. Additional subnet mask can also be specified. Refer to online help for detailed descriptions of IP Filtering p

Security Guide 252. Use an existing certificate obtained from a certificate authority (i.e. VeriSign, Thawte, etc.)When SSL is disabledWhen SSL is dis

Xerox FreeFlow Print Server Security GuideiTable of contents . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

26 Security GuideNOTE: During steps 2-5, the user may go back and correct any mistakes made in previous steps.– Click on the 'Enable SSL/TLS

Security Guide 27Digital CertificatesSSL/TLS cannot be enabled unless a digital certificate has been installed on the system, using the Add Certificat

28 Security GuideHTTP Used when connecting to the server via the HTTP gateway. Connections can also be filtered using the IP Filter feature under Setu

Security Guide 29NOTE: The IP Filtering (Setup->IP Filter) feature can also help in limiting access to the server. This is the Xerox FreeFlow Print

30 Security GuidePrevent Unauthorized Queue ChangesQueue Lock• Queues can be locked and unlocked by the System Administrator.• Properties of a locked

Security Guide 31updated to the newer version. Any security patch that is determined to have a negative impact to Xerox FreeFlow Print Server operatio

32 Security GuideVirus ScanThe Xerox FreeFlow Print Server runs on the Solaris 10 Operating System (OS). This OS makes the Xerox FreeFlow Print Server

Xerox FreeFlow Print Server Security GuideiiTable of contentsAudit Logs. . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . .

Security Guide 1IntroductionThe Security Guide provides the information needed to perform system administration tasks for maintaining the Xerox FreeFl

2 Security GuideCustomer support To place a customer service call, dial the direct TTY number for assistance. The number is 1-800-735-2988.For additio

Security Guide 3SecurityThis section describes the Xerox FreeFlow® Print Server system-supplied security profiles. It outlines the characteristics of

4 Security GuideNOTE: Regardless of the security profile, anonymous FTP is Read-only with restricted access to /export/home/ftphome only.Low FTP is en

Security Guide 5Enable and disable servicesThe following tables provide a list of the services that can be enabled and disabled from the Xerox FreeFlo