7
•
Reprint from Saved Job
•
SMart eSolutions
•
Custom Services (Extensible Interface Platform or EIP)
•
Network Accounting and Auxiliary Access
•
Use of Embedded Fax mailboxes.
•
Admin Password Reset security feature
•
NTP
•
Direct USB Printing,
•
AppleTalk and Novell protocols
•
Web Services
2.
Xerox recommends that the System Administrator change the SNMP v1/v2c public/private community strings from their default
string names to random string names.
3.
Direct USB printing is not part of the evaluated configuration for a ColorQube™ 9201/9202/9203.
4.
Before upgrading software via the Manual/Automatic Customer Software Upgrade, please check for the latest certified software
versions. Otherwise, the machine may not remain in its certified configuration.
5.
Xerox recommends that customers sign up for the RSS
9
subscription service available via the Xerox Security Web Site
(Security@Xerox) at www.xerox.com/security that permits customers to view the latest Xerox Product Security Information and
receive timely reporting of security information about Xerox products, including the latest security patches .
6.
The device should be installed in a standard office environment. Office personnel should be made aware of authorized service
calls (for example through appropriate signage) to discourage unauthorized physical attacks such as attempts to remove the
internal hard disk drive(s). The System Administrator should also ensure that office personnel are made aware to pick up the
outputs of print and copy jobs in a timely manner.
7.
Customers who encounter or suspect software problems should immediately contact the Xerox Customer Support Center to
report the suspected problem and initiate the SPAR (Software Problem Action Request)
10
process for addressing problems found
by Xerox customers.
8.
Caution: the device allows an authenticated System Administrator to disable functions like Image Overwrite Security that are
necessary for secure operation. System Administrators are advised to periodically review the configuration of all installed
machines in their environment to verify that the proper evaluated configuration is maintained.
9.
Depending upon the configuration of the device, two IPv4 addresses, a primary IPv4 address and a secondary IPv4 address,
may be utilized.
The System Administrator selects whether the primary IPv4 address will be obtained statically or dynamically
via DHCP from the
IP (Internet Protocol)
page on the Web UI
11
.
The second IPv4 address is assigned via APIPA when the
System Administrator enables the ‘Self Assigned Address’ option from the
IP (Internet Protocol)
page on the Web UI.
If the
‘Self Assigned Address’ option is enabled (which is the default case), this secondary IPv4 address will not be visible to the SA
12
.
Xerox recommends that the ‘Self Assigned Address’ option from the Web UI
IP (Internet Protocol)
page be disabled unless
either APIPA is used or Apple Rendezvous/Bonjour support is required.
10.
If a system interruption such as power loss occurs a job in process may not be fully written to the hard disk drive(s).
In that case
any temporary data created will be overwritten during job recovery but a corresponding record for the job may not be recorded
in the completed job log or audit log.
11.
If IPv6 is disabled and then a software upgrade is performed by a Xerox Service Technician using an AltBoot, IPv6 will be
disabled even though both the Local UI and Web UI show that IPv6 is enabled. IPv6 can be enabled again by first disabling it
on the Web UI and then re-enabling it on the Web UI.
12.
A unique Embedded Fax or Scan-to-Mailbox mailbox should be established for each authenticated user.
13.
Remote Polling should only be used by the System Administrator.
14.
Printing of Embedded Fax confirmation reports is not included in the evaluation. The Embedded Fax cover sheets should not be
printed with an Embedded Fax job.
9
Really Simple Syndication – A lightweight XML format for distributing news headlines and other content on the Web. Details for signing up for this
RSS Service are provided in the
Security@Xerox RSS Subscription Service guide posted on the Security@Xerox site at
http://www.xerox.com/go/xrx/template/009.jsp?view=Feature&ed_name=RSS_Security_at_Xerox&Xcntry=USA&Xlang=en_US.
10
A SPAR is the software problem report form used internally within Xerox to document customer-reported software problems found in products in
the field.
11
The primary IPv4 address can also be assigned dynamically via DHCP from the Dynamic Addressing screen on the Local UI.
12
The primary IPv4 address will always be displayed on the Configuration Report that can be printed for a ColorQube™ 9201/9202/9203.
