Security Best Practices Part 2

00:00

welcome back to printing Security Intermediate Course. And in this lesson, I'm going to continue from the previous lesson in which I was talking about the best practices for securing or printing device. So, uh, you have seen in previous lesson that talk about disabling ports and protocols,

00:19

and, uh,

00:21

I'm here now going to go into more serious stuff. So first thing you should do is unable hardware encryption of devices storage. So if you're using HD or essence dean that device, it's usually HD for

00:34

various reasons,

00:37

so h d on. And if it's not by default encrypted, you should just make sure that's enabled

00:47

positive that any new device you buy today, which is a network printer which has agh today, has the option through the encryption.

00:57

Also, if it's possible if it exists, is is setting on a device configure right the SEC. And of course, if you can use it on your

01:04

on your network, you should configure it with I P sec in order to protect dating transit from server toe the device,

01:12

um, said PG Ellen file system password. So if

01:19

remember that PJ Elkan do a lot of settings over the device, and with the P J O. You can change some things. So if you set the PDO password, if there is some command that is not supposed to being in a regular print file,

01:34

the printer was simply asked for password so it will not execute these things. Also, you should set the passwords to excels file system. If that is an option,

01:47

if you're having an MSB, you should find a way to fix the content of from field on them. If he's why? Because if this field is left open, then somebody can misuse them. FB to send some compromising information or to track in some people

02:06

from somebody else's

02:07

email address. And that shouldn't happen.

02:12

So basically, in that way you are preventing identity spoofing.

02:19

And, of course, you should have the permanent fleet monitoring off the devices, using some kind of specialized money during tools.

02:30

Now, when it comes to all these passwords, when that I was talking about, you should set them, including embedded Web server password.

02:38

You should use random generated password, and you should use the maximum length password that is

02:45

possible for that particular passport on each device.

02:50

You should use fleet management Salter to set and store the passwords,

02:54

and you should use different passport in every device. So that means that if you're

03:01

having 100 devices people, usually they have just one password for all. For example, inventive observers.

03:12

You shouldn't do that. You should. You should have them entered, generated randomly and entered. Why are the Fleet management software

03:22

and you should set password also on the to the excesses of the fleet? Management softer. So in that way, everything is

03:31

very, very carefully protected.

03:35

And because these passwords are random generated and sometimes quite long, it would be really difficult for somebody to just see what you're typing if you're accidentally dumped typing it.

03:51

For example, if you're accessing imbedded observer of the device itself or so on.

03:54

So this way you're pretty safe also, Um, if you're storing your passport somewhere else, it should be in very surf surf location. I always recommend you have a notebook, which is stored somewhere in the safe place in the company and some kind of safe,

04:12

in which you should have that proved them printed or written down. So that's

04:19

that's definitely must, especially if you're using random generated passers, which nobody can remember.

04:27

So let's have a short learning check. What passport should be settled? Printers and the answers are emailed. Anybody that part admitted server passwords,

04:36

email and p jail passwords or P jail and file system passwords.

04:45

And the correct answer is B J l and file system passwords. Email passwords are not to be set on printers.

04:54

So in this video you have learned about remainder off general best practices for printing security

05:00

in terms of settings