Samsung X4220 Instruction Manual page 16

Samsung Multifunction MultiXpress X4220, X4250, X4300, X401, K4250, K4300, K4350, K401 Series
1.4.4.2 TOE Security Functions
The following security functions are provided by the TOE:
Identification & Authentication (TSF_FIA)
The TOE provides two types of user identification and authentication methods. If
U.ADMINISTRATOR configures the local authentication, the MFP will authenticate the
U.USER against an internal database. If U.ADMINISTRATOR selects the external
authentication as an authentication method, then MFP will authenticate the U.USER using an
external authentication server.
U.USER should be identified and authenticated by entering both ID and Password to access
to the TOE management functions. If U.USER fails to login specific times, the system blocks
the session of the U.USER during predefined duration.
U. ADMINISTRATOR can configure Identification & Authentication Policy by using LUI or
RUI.
U. ADMINISTRATOR can also give specific permission for U.USER to only use certain
feature of the machine.
The TOE provides the Common Access Control & TOE Function Access Control based on
the user role assigned to a user group ID by U.ADMINISTRATOR when U.NORMAL
performs read/delete/modify operations on the data owned by U.NORMAL or when
U.NORMAL accesses print/scan/copy/fax functions offered by the MFP.
The TOE shall terminate an interactive session after predefined time interval of user
inactivity.
Network Access Control (TSF_NAC)
The MFP system has a network interface connected to a network. The MFP system can
send/receive data and MFP configuration information and thus is able to configure MFP
settings.
There are a couple of methods to access and communicate with the MFP from outside of the
TOE through the network, and the TOE manages all incoming packets via a network
interface.
1) Protocol and Port Control:
The TOE can only allow protocols and ports configured by U.ADMINISTRATOR.
U.ADMINISTRATOR can configure this information via the LUI or RUI.
2) IP and MAC address filtering:
U.ADMINISTRATOR can make filtering rules for IP addresses and MAC addresses.
After that, packets are only allowed as per the IP filtering rule registered by
U.ADMINISTRATOR.
16

Copyright 2014 SAMSUNG ELECTRONICS Co., Ltd., All rights reserved