Xerox® Security Guide for Entry Production Color Class Products
March 2019
Page 2-8
User Data in Transit
This section focuses on the protection of user data (print/scan/other jobs) in transit as they are submitted
to the product for processing and/or are sent from the product to other systems. Additional protections
are also discussed in the
Network Security
section of this document.
Inbound User Data
Print Job Submission
In addition to supporting network level encryption including IPSec and WPA, Xerox products also support
encryption of print job data at the time of submission. This can be used to securely transmit print jobs
over unencrypted connections or to enhance existing network level security controls.
Encrypted Transport
Description
IPPS (TLS)
Submit print jobs via Secure Internet Printing Protocol. This protocol is
based on HTTP and utilizes the TLS suite to encrypt data.
HTTPS (TLS)
Securely submit a print job directly to product via the built-in web server.
Xerox Print Stream
Encryption
The Xerox Global Print Driver® supports document encryption when
submitting Secure Print jobs to enabled products. Simply check the box to
Enable Encryption when adding the Passcode to the print job.
Outbound User Data
Scanning to Network Repository, Email, Fax Server
Versant® digital press products support scanning of hardcopy documents to external network locations
including file repositories and email and facsimile services. In addition to supporting network level
encryption including IPSec and WPA, Xerox products support the following:
Protocol
Encryption
Description
HTTP
N/A
Unencrypted HTTP protocol
HTTPS (TLS)
TLS
HTTP encrypted by TLS
FTP
N/A
Unencrypted FTP
SFTP (SSH)
SSH
FTP encrypted by SSH
SMBv3
Optional
Encryption may be enabled on a Windows share.
Versant® and ColorPress® products currently support SMB
encryption.
SMBv2
N/A
Unencrypted SMB
SMBv1
N/A
Not used as a transport protocol. Used for network discovery only.
SMTP (email)
S/MIME
The product uses SMTP to transmit data to the email server. Email
authentication, encryption, and signing are supported. Please refer
to the Network Security section of this document for details.
Scanning to User Local USB Storage Product
Scan data is transferred directly to the user’s USB product. Filesystem encryption of user products are
not supported.
