Ipsec/Firewall Configuration (V.36.Xx) - HP 635n - JetDirect IPv6/IPsec Print Server Administrator's Manual

5

IPsec/Firewall Configuration (V.36.xx)

(Full-featured print servers only) IPsec/Firewall features provide network-layer security on both IPv4
and IPv6 networks. The Firewall provides simple control of IP addresses that will be allowed access.
Internet Protocol security (IPsec, RFC 2401) provides the additional security benefits of authentication
and encryption,
IPsec configuration is relatively complex. But because IPsec provides security at the network layer and
can be relatively independent of application layers, the opportunity for secure host-to-host
communications over a widespread network, such as the Internet, is greatly enhanced.
●
Print servers and printers/MFPs that support IPsec may control IP traffic using both Firewall and
IPsec protection.
●
If IPsec is not supported, then IP traffic may be controlled using Firewall protection.
NOTE:
supports an SNMPv3 agent at the application layer for management application security, and
open Secure Sockets Layer (SSL) standards at the transport layer for secure client-server
applications (for example, client-server authentication or HTTPS Web browsing).
For IPsec/Firewall operation on the print server, you must configure an IPsec/Firewall policy to apply to
specified IP traffic. IPsec and Firewall policy pages are accessed through the embedded Web server
and displayed by your Web browser. Typical IPsec and Firewall policy pages are illustrated below.
NOTE:
policy, be sure that computer systems used to communicate with the print server are also properly
configured. IPsec policies configured on the print server and computer systems must be
compatible; otherwise, connections will fail.
After a policy is configured, it is not applied on the print server until you click Apply button.
ENWW
In addition to Firewall and IPsec protection at the network layer, the print server also
To ensure communications with an HP Jetdirect print server configured with an IPsec
97