8
1.
All passwords entered on the Control Panel for authentication purposes will be obfuscated by ‘*’s. All passwords
entered on the WebUI for authentication purposes will also be obfuscated, but the character that does the
obfuscation will depend on the web browser used. This applies to all the models covered by these guidelines.
2.
The System Administrator does not have to configure or perform any actions to utilize the random number generation
needed for key generation and for the encryption algorithms the products covered by these guidelines use for the
security features described in I. and III.
4
Change the SNMPv1/v2c public/private community strings from their default string names to random un-guessable
string names of at least 8 characters in length.
5
Customers should sign up for the RSS
5
subscription service available via the Xerox Security Web Site (Security@Xerox)
at
www.xerox.com/security
that permits customers to view the latest Xerox Product Security Information and receive
timely reporting of security information about Xerox products, including the latest security patches.
6
Customers who encounter or suspect software problems should immediately contact the Xerox Customer Support
Center to report the suspected problem and initiate the SPAR (Software Problem Action Request)
6
process for
addressing problems found by Xerox customers.
Customers who required specialized changes to support unique workflows in their environment may request specific changes
to normal behavior. Xerox will supply these SPAR releases to the specific customers requesting the change. Please note that
in general enabling a specialized customer-specific feature will take the system out of the evaluated configuration.
Contact
For additional information or clarification on any of the product information given here, contact Xerox support.
The information in this document is subject to change without notice.
5
Really Simple Syndication – A lightweight XML format for distributing news headlines and other content on the Web. Details for signing up for
this RSS Service are provided in the
Security@Xerox RSS Subscription Service guide
posted on the Security@Xerox site at
http://www.xerox.com/go/xrx/template/009.jsp?view=Feature&ed_name=RSS_Security_at_Xerox&Xcntry=USA&Xlang=en_US
.
6
A SPAR is the software problem report form used internally within Xerox to document customer-reported software problems found in products
in the field.
