HP Jetdirect J7974E, Administrator'S Manual

Page: 103 / 186

5 IPsec/Firewall Configuration (V.34.xx)
Depending on the print server product and the printer/MFP in which it is installed, IP traffic may be
controlled (processed or discarded) by using the Internet Protocol security (IPsec, RFC 2401) or Firewall
features on the print server.
● Print servers and printers/MFPs that support IPsec may control IP traffic using both Firewall and
IPsec protection.
●
If IPsec is not supported, then IP traffic may be controlled using Firewall protection.
IPsec/Firewall features provide network-layer security on both IPv4 and IPv6 networks. The Firewall
provides simple control of IP addresses that will be allowed access. IPsec provides the additional
security benefits of authentication and encryption,
NOTE In addition to Firewall and IPsec protection at the network layer, the print server also
supports an SNMPv3 agent at the application layer for management application security, and
open Secure Sockets Layer (SSL) standards at the transport layer for secure client-server
applications (for example, client-server authentication or HTTPS Web browsing).
IPsec configuration is relatively complex. But because IPsec provides security at the network layer and
can be relatively independent of application layers, the opportunity for secure host-to-host
communications over a widespread network, such as the Internet, is greatly enhanced.
For IPsec/Firewall operation on the print server, you must configure an IPsec/Firewall policy to apply to
specified IP traffic. IPsec and Firewall policy pages are accessed through the embedded Web server
and displayed by your Web browser. Typical IPsec and Firewall policy pages are illustrated below.
NOTE To ensure communications with an HP Jetdirect print server configured with an IPsec
policy, be sure that computer systems used to communicate with the print server are also properly
configured. IPsec policies configured on the print server and computer systems must be
compatible; otherwise, connections will fail.
ENWW 93