Specifications

9
White Paper: Canon imageRUNNER/imagePRESS Security
2.2 – Network Security
Network and Print Security (Canon Network Printer Kit Only)
Canon imageRUNNER/imagePRESS devices include a number of highly configurable network security
features that assist in securing information when the optional Network Print Kit is installed. Standard
network security features include the ability to permit only authorized users and groups to access and
print to the device, limiting device communications to designated IP/MAC addresses, and controlling
the availability of individual network protocols and ports as desired.
Enabling/Disabling Protocols/Applications
Through Canon’s device setup and installation utilities, network administrators are provided
with the ability to configure the specific device protocols and service ports that are accessible.
As a result, unwanted device communication and system access via specific transport
protocols can be effectively blocked.
The imageRUNNER/imagePRESS devices have the ability to disable unused TCP/IP ports to
further secure the devices. Disabling ports affects the available functions and applications on
the device. Configurable ports include:
* Used ports and default port settings may vary per model. Please consult your device manuals or contact your service technician
for additional details.
Section 2 — Canon’s Imaging & Printing Security Framework
Name Port
Description
Setting Location
Functions Impacted
by this Port
FTP (*1)
TCP 21
File Transfer [Control]
System Settings>Network
Settings>TCP/IP Settings>FTP Print
Settings
If disabled, FTP printing/scanning
options will be disabled
SMTP
TCP 25 Simple Mail Transfer Protocol
System Settings>Network
Settings>Email/Ifax
E-mail and i-Fax sending capability are
enabled through this function
HTTP
TCP 80 World Wide Web HTTP
System Settings>Network
Settings>TCP/IP Settings>Use HTTP
No access to the imageRUNNER’s
Remote UI utility if disabled.
Printing over IPP will cease if disabled.
netbios-ssn
TCP 139 NETBIOS Session Service
System Settings>Network
Settings>SMB
Settings>Use SMB
Scanning to a windows folder
will be affected.
HTTPS
TCP 443 HTTP protocol over TLS/SSL
System Settings>Network
Settings>TCP/IP Settings> press [On]
for <Use SSL>.
If enabled, all network traffic between user
pc and imageRUNNER device via the
Remote UI utility is secure.
PRINTER
TCP 515 spooler
System Settings>Network
Settings>Use Spooler> press [On]
Disabling this protocol will cease
Printing over LPR
IPP
TCP 631 IPP (Internet Printing Protocol)
System Settings>Network Settings>
TCP/IP Settings screen> press
[IPP Print Settings]> press [On]
Disabling this protocol will cause Printing
over IPP protocol to stop.
HTTP
TCP 8000 World Wide Web HTTP for MEAP
System Settings>
MEAP Settings>
Set [Use HTTP] to [On]
Disabling this feature disables access to
MEAP SMS Page and other MEAP
applications such as iWAM for MEAP
RAW
TCP 9100 Standard TCP/IP Printer (RAW)
In the printer properties dialog box,
click [Configure Port] >select [LPR] or
[Raw].
Disabling this feature causes Printing over
Std TCP/IP protocol to stop
SNMP
UDP 161
Simple Network Management
Protocol
System Settings>Network
Settings>TCP/IP
Settings> [SNTP Settings]> [On] for
[Use SNTP]
Disabling this feature will result in
imageRUNNER devices not being
discovered by device management
utilities such as iWEMC or Netspot
Device Installer