Xerox DocuPrint 100MX, Security Manual

Security Guide

29

NOTE: The IP Filtering (Setup->IP Filter) feature can also help in 
limiting access to the server. This is the Xerox FreeFlow Print 
Server's GUI interface to the SunScreen Lite firewall that is part of 
the Solaris 8 Operating System. This feature allows the user to 
limit the number of clients who are allowed to access the server 
via services such as LPR, IPP, HTTP, HTTPS, SMB Printing, and 
FTP. By default, the firewall is disabled (all ports open), but can be 
enabled to either only allow specified connections (by IP address, 
IP address range, or subnet mask) or to close all ports. For DRW 
clients, this mechanism exists under System Preferences -> 
Remote Workflow -> "Enable Specified Connections". 

NOTE: FreeFlow® v2.0 and newer allows users to select whether 
or not the Xerox FreeFlow Print Server server they connecting to 
will have high security enabled. If so, the client will use other 
communication paths such as sIPP (via SSL) for job submissions 
and sFTP for decomposition services (NetAgent).

Secure Print

MICR mode

The MICR mode disables all Xerox FreeFlow Print Server features 
that allow additional prints to be produced (such as Sample Print, 
Reposition Output, etc.).

FTP

Access the server via FTP and/or submit jobs from a DigiPath/
FreeFlow client via the Digipath/FreeFlow Print Manager. This 
service (ftpd) is shutdown when Xerox FreeFlow Print Server 
security is set to high. In FreeFlow v2.0, the client has the ability 
to use secure FTP (sFTP) when Xerox FreeFlow Print Server 
security is set to high and FTP is not available. Connections 
can also be filtered using the IP Filter feature under Setup -> 
Security Profiles -> <Any Profile> -> RPC tab.

SSL

Required when using the TLS/SSL security feature and/or a 
FreeFlow 2.0+ client with Xerox FreeFlow Print Server security 
is set to high. Connections can also be filtered using the IP 
Filter feature under Setup -> IP Filter. 

NFS

Necessary when using NFS mounted directories. This service 
is disabled when Xerox FreeFlow Print Server security is set to 
high. Connections can also be filtered using the IP Filter feature 
under Setup -> Security Profiles -> <Any Profile> -> RPC tab.

Network 

Protocol

Required