User Data In Transit; Inbound User Data; Print Job Submission; Encrypted Transport - Xerox AltaLink B8045 Security Manual

Xerox® Security Guide for Office Class Products: AltaLink®  VersaLink®

User Data in transit

This section focuses on the protection of user data (print/scan/other jobs) in transit as they are submitted
to the product for processing and/or are sent from the product to other systems. Additional protections
are also discussed in the

Inbound User Data

Print Job Submission

In addition to supporting network level encryption including IPSec and WPA Xerox products also support
encryption of print job data at the time of submission. This can be used to securely transmit print jobs
over unencrypted connections or to enhance existing network level security controls.

Encrypted Transport

IPPS (TLS)
HTTPS (TLS)
Xerox Print Stream

Encryption

Outbound User Data

Scanning to Network Repository, Email, Fax Server

AltaLink® and VersaLink® multifunction products support scanning of hardcopy documents to external
network locations including file repositories and email and facsimile services. In addition to supporting
network level encryption including IPSec and WPA Xerox products support the following.

Protocol

Encryption
HTTP N/A
HTTPS (TLS) TLS
FTP N/A
SFTP (SSH) SSH
SMBv3 Optional
SMBv2 N/A
SMBv1 N/A
SMTP (email) S/MIME
November 2018
Network Security section of this document.

Description

Submit print jobs via Secure Internet Printing Protocol. This protocol is
based on HTTP and utilizes the TLS suite to encrypt data.
Securely submit a print job directly to product via the built-in web server.
The Xerox Global Print Driver® supports document encryption when
submitting Secure Print jobs to enabled products. Simply check the box to
Enable Encryption when adding the Passcode to the print job.

Description

Unencrypted HTTP protocol.
HTTP encrypted by TLS
Unencrypted FTP.
FTP encrypted by SSH
Encryption may be enabled on a Windows share.
AltaLink® products currently support SMB encryption.
VersaLink® products do not currently support SMB encryption.
Unencrypted SMB
(Not used as a transport protocol. Used for network discovery only)
The product uses SMTP to transmit data to the email server. Email
authentication, encryption, and signing are supported. Please refer
to the Network Security section of this document for details.
Page 10