8
3.
Xerox recommends that the System Administrator set the USB Settings to ‘Direct Printing via Driver’ mode to allow only direct
printing and prohibit submittal of software upgrade files to the device from a USB Flash Drive. To set the USB Settings to ‘Direct
Printing via Driver’ mode via the Web UI:
•
Select the
Properties
tab.
•
Select the following entries from the
Properties
'
Content
menu’:
Connectivity
Physical Connections
USB Port
.
•
Make sure the [Direct Printing via Driver] option under ‘USB Connection Mode’ is selected.
•
Select the [
Apply
] button. This will ensure that submittal of software upgrades to the device from a USB Flash Drive is
prohibited.
4.
Before upgrading software on a ColorQube™ 9201/9202/9203 Multifunction System via the Manual/Automatic Customer
Software Upgrade, please check for the latest certified software versions. Otherwise, the machine may not remain in its certified
configuration.
5.
Xerox recommends that customers sign up for the RSS
10
subscription service available via the Xerox Security Web Site
(Security@Xerox) at www.xerox.com/security that permits customers to view the latest Xerox Product Security Information and
receive timely reporting of security information about Xerox products, including the latest security patches that apply to the
ColorQube™ 9201/9202/9203 Multifunction System.
6.
The ColorQube™ 9201/9202/9203 Multifunction System should be installed in a standard office environment. Office personnel
should be made aware of authorized service calls (for example through appropriate signage) in order to discourage
unauthorized physical attacks such as attempts to remove the internal hard disk drive(s).
7.
Customers who encounter or suspect software problems against a ColorQube™ 9201/9202/9203 Multifunction System should
immediately contact the Xerox Customer Support Center to report the suspected problem and initiate the SPAR (Software
Problem Action Request)
11
process for addressing problems found by Xerox customers.
8.
Caution: A ColorQube™ 9201/9202/9203 allows an authenticated System Administrator to disable functions like Image
Overwrite Security that are necessary for secure operation. System Administrators are advised to periodically review the
configuration of all installed machines in their environment to verify that the proper evaluated configuration is maintained.
9.
Depending upon the configuration of the ColorQube™ 9201/9202/9203, two IPv4 addresses, a primary IPv4 address and a
secondary IPv4 address, may be utilized.
The System Administrator selects whether the primary IPv4 address will be obtained
statically or dynamically via DHCP from the
IP (Internet Protocol)
page on the Web UI
12
.
The second IPv4 address is assigned
via APIPA when the System Administrator enables the ‘Self Assigned Address’ option from the
IP (Internet Protocol)
page on
the Web UI.
If the ‘Self Assigned Address’ option is enabled (which is the default case), this secondary IPv4 address will not be
visible to the SA
13
. Xerox recommends that the ‘Self Assigned Address’ option from the Web UI
IP (Internet Protocol)
page be
disabled unless either APIPA is used or Apple Rendezvous/Bonjour support is required.
10.
If a system interruption such as power loss occurs a job in process may not be fully written to the hard disk drive(s).
In that case
any temporary data created will be overwritten during job recovery but a corresponding record for the job may not be recorded
in the completed job log or audit log.
11.
If IPv6 is disabled and then a software upgrade is performed by a Xerox Service Technician using an AltBoot, IPv6 will be
disabled even though both the Local UI and Web UI show that IPv6 is enabled. IPv6 can be enabled again by first disabling it
on the Web UI and then re-enabling it on the Web UI.
12.
Xerox recommends that a unique Embedded Fax or Scan-to-Mailbox mailbox is established for each authenticated user of the
ColorQube™ 9201/9202/9203.
13.
Xerox recommends that Remote Polling should only be used by the System Administrator.
14.
Xerox recommends that passcodes for Embedded Fax and Scan-to-Mailbox mailboxes should be selected to be as random as
possible and should be changed on a regular basis, consistent with applicable internal policies and procedures.
15.
Xerox recommends that the System Administrator should disable (set to ‘Off’) both printing of Embedded Fax confirmation
reports (see page AdminstrationandAccounting-29 of the Admin and Accounting Guide
8
) and Embedded Fax cover pages (see
page FAX-11 of the Fax Guide
9
).
16.
Xerox recommends that users of the ColorQube™ 9201/9202/9203 undergo appropriate training on how to use the ColorQube™
9201/9202/9203 in a secure manner before being assigned user accounts to access the ColorQube™ 9201/9202/9203.
10
Really Simple Syndication – A lightweight XML format for distributing news headlines and other content on the Web. Details for signing up for
this RSS Service are provided in the
Security@Xerox RSS Subscription Service guide posted on the Security@Xerox site at
http://www.xerox.com/go/xrx/template/009.jsp?view=Feature&ed_name=RSS_Security_at_Xerox&Xcntry=USA&Xlang=en_US.
11
A SPAR is the software problem report form used internally within Xerox to document customer-reported software problems found in products in
the field.
12
The primary IPv4 address can also be assigned dynamically via DHCP from the Dynamic Addressing screen on the Local UI.
13
The primary IPv4 address will always be displayed on the Configuration Report that can be printed for a ColorQube™ 9201/9202/9203.
