primos User Manual
Security
48
6.4
How to Protect primos from Cross-Site Scripting
What is Cross-
Site Scripting?
Cross-site scripting (XSS) is a form of attack which uses a security vulnerability in websites:
By default the user input entered on a website is submitted to the browser. An attacker
may use this to transmit malicious code (e.g. scripts). The objective is e.g. to steal user data
such as user profiles.
To prevent cross-site scripting attacks values can be checked and only trusted values
accepted.
1. Start the primos Control Center.
2. Select
SECURITY – Device access
.
3. In the
Cross-Site-Scripting (XSS)
area, enable/disable
Value check
.
The setting will be saved.
6.5
How to Control the Access to primos (TCP Port Access Control)
TCP Port Access
Control
You can control the access to primos. To do so, all TCP ports on primos can be blocked.
Network elements that are to have permission to access primos, can be defined as
exceptions and excluded from locking. primos only accepts data packets from network
elements defined as exceptions. Please note: This also applies to iOS devices. If the TCP
port access control is enabled, you can only print from iOS devices which have been
defined as exceptions.
Exceptions
In order to exclude network elements (e.g. iOS devices, clients, DNS server, SNTP server)
from port locking, they must be defined as exceptions. To do so, the IP addresses or MAC
addresses (hardware addresses) of the network elements with access rights must be
entered in the 'Exceptions' area. Please note:
• MAC addresses are not delivered through routers!
• Address ranges can be defined using CIDR notation.
printers for which a queue has been created in primos are automatically excluded from
port locking.
Test Mode
The 'test mode' allows you to check the configured access protection. If the test mode is
activated, access protection remains active until primos is rebooted. After restarting, the
protection is no longer effective.
The 'test mode' option is activated by default. After a successful test, you must deactivate
the test mode so that access protection remains permanently active.
Summary of Contents for primos
Page 1: ...User Manual...
