XEROX WorkCentre 7755/7765/7775 Information Assurance Disclosure Paper
14
Ver. 1.01, April 2010
Page
14 of 40
otherwise insecure protocol. SNMP Traps may not be secure if either the client or the device has just been
rebooted. IP Filtering can be useful to prevent SNMP calls from non-IPSec clients.
Once an IPSec channel is established between two points, it stays open until one end reboots or goes into
power saver,. Only network clients and servers will have the ability to establish an IPSec tunnel with the
machine. Thus device-initiated operations (like scanning) cannot assume the existence of the tunnel unless
a print job (or other client initiated action) has been previously run since the last boot at either end of the
connection.
2.8.2.
Ports
The following table summarizes all potential open ports and subsequent sections discuss each port in more detail.
Default
Port #
Type
Service name
25 TCP SMTP
53 UDP DNS
68 UDP BOOTP/DHCP
80 TCP HTTP
88 UDP Kerberos
110 TCP POP-3
client
137
UDP
NETBIOS- Name Service
138
UDP
NETBIOS-Datagram Service; SMB filing and Scan template retrieval
139
TCP
NETBIOS; SMB filing and Scan template retrieval
161 UDP SNMP
162 UDP SNMP
trap
389 UDP LDAP
396 TCP Netware
427 UDP SLP
443 TCP SSL
515 TCP LPR
631 TCP IPP
1900 UDP SSDP
3003 TCP http/SNMP
reply
9100 TCP raw
IP
Please note that there is no ftp port in this list. ftp is only used to export scanned images and to retrieve Scan Job
Templates, and will open port 21 on the remote device. An ftp port is never open on the Network Controller itself.
2.8.2.1.
Port 25, SMTP
This unidirectional port is open only when Scan to E-mail or Internet Fax (I-Fax) is exporting images to an SMTP server.
SMTP messages & images are transmitted to the SMTP server from the device.
2.8.2.2.
Port 53, DNS
Designating a DNS server will allow the device to resolve domain names. This can be configured via the WebUI.
2.8.2.3.
Port 68, DHCP
This port is used only when performing DHCP, and is not open all of the time. To permanently close this port, DHCP must be
explicitly disabled. This is done in User Tools via the Local User Interface or via the TCP/IP page in the Properties tab on the
WebUI.
2.8.2.4.
Port 80, HTTP
