Pitney Bowes SendPro HVF1 User Manual page 30

Connectivity
As required, in some cases monthly.
What is the network traffic flow to and from the SendPro MailCenter system? What firewall
rules need to be in place to allow the necessary communication?
Outgoing contact initiated (no push) utilizing HTTPS, URLs provided by Pitney Bowes services.
l
Outgoing - transactional data.
l
Incoming is both transactional data and files and Web Services.
l
Can you identify suspicious activity affecting SendPro MailCenter?
Yes. An audit process exists to validate the financial integrity of the system. Error logs are available
and can be uploaded to the Pitney Bowes Data Center.
Regularly scheduled physical visits from Pitney Bowes Service.
l
What are the access controls in place to secure SendPro MailCenter?
The application access is managed by the customer using User IDs and passwords. Unique,
cryptographically strong passwords for each machine restricts access to the operating system.
How do you authenticate an individual? A service?
The application access is managed by the customer using User IDs and passwords. The [[[Undefined
variable SPMC-Variables.SPMC-Variablesroduct Name no mark]]] does not provide services over a
network so authentication not required.
Are there audit trails in place?
Yes. PSD transactional audits, extensive logs all financial transactions are audited by the Pitney
Bowes infrastructure. The SendPro MailCenter logs all error conditions, and maintains ink usage logs,
print usage logs, etc.
Is data stored on the device?
Yes. The SendPro MailCenter stores transactional data, graphic images, customer profiles and
settings, files (rates, etc.).
What controls protect the data?
All files and data interface utilizing HTTPS. Incoming data and files are signed and verified prior to use.
If consumed by the printer, it is verified on each use. If used by the application, it is verified on load.
Does the SendPro MailCenter allow remote administration?
Pitney Bowes User Guide January 2023 30