Various Security Functions
Do you feel uneasy about the following problems?
Unattended output
Unauthorized access
Faxes sent to the wrong destination
Forgetting to erase confidential data on the machine
The machine provides various security functions for minimize the risk of information leakage and unauthorized access.
This section describes functions that are effective in certain situations.
This section describes functions that are effective in certain situations.
|
Implementing security measures does not guarantee that all information will be protected. |
 |
Using the Import All function enables multiple devices to be managed with the same settings. Importing/Exporting the Setting Data |
Preventing Documents Leaks and Modification
 | When managing confidential documents, it is necessary to handle problems such as leaks, loss, and modification. The machine is equipped with security functions designed to prevent paper and electronic documents from leakage and tampering, such as embedding invisible text in output, not starting printing until the user logs in at the device, and attaching a signature to PDF documents. Use the following functions as security measures for preventing document leaks and modification, etc. |
Forced Hold
To avoid leaving printed material, accidental information leakage, misprinting, etc., the administrator can set to store the document before printing. Printing Documents Held in the Machine
Encrypted Secure Print
By using Encrypted Secure Printing, you can send encrypted printing data to a machine from your computer. This enables you to reduce the risk of information leaks when sending printed data, and to print more safely. Allowing Only Encrypted Secure Print
Digital Signature
You can increase the reliability of documents created on the machine by adding digital signatures to scanned documents. The digital signature is added using a key and certificate mechanism, which enables you to identify the device and/or user that created the document, while ensuring that the data has not been altered. Adding a Digital Signature to Sent Files
Encrypted PDF
Setting a password when scanning an original enables PDF files to be encrypted for sending/saving. This helps reduce the risk of the files being viewed or edited by others. Performing Encryption
Preventing Unauthorized Access to the Network
 | Although Cloud services have made it easier to exchange data via the Internet, communication can still be intercepted or modified by malicious third parties due to network vulnerabilities. The machine provides various measures for increasing network security, such as only allowing communication with specific IP addresses and encrypting data for communication. Use the following functions as security measures for preventing unauthorized network access, etc. |
Firewall Settings
Unauthorized access by third parties, as well as network attacks and breaches, can be blocked by only allowing communication with devices that have a specific IP address. Restricting Communication by Using Firewalls
Proxy Settings
You can provide greater security by using a proxy server for connections outside the network, such as when browsing websites. Setting a Proxy
TLS Settings
TLS is a protocol for encryption for data sent over a network and is often used for communication via a Web browser or an e-mail application. TLS enables secure network communication when accessing the machine in a variety of situations, such as when using the Remote UI or address book management software. Configuring the Key and Certificate for TLS
IPSec Settings
While TLS only encrypts data used on a specific application, such as a Web browser or an e-mail application, IPSec encrypts the whole (or payloads of) IP packets. This enables IPSec to offer a more versatile security system than TLS. Configuring the IPSec Settings
IEEE 802.1X Settings
If a device tries to connect and start communicating on an 802.1X network, the device must go through user authentication in order to prove that the connection is made by an authorized user. Authentication information is sent to and checked by a RADIUS server, which permits or rejects communication to the network depending on the authentication result. If authentication fails, a LAN switch (or an access point) blocks access from the outside of the network. The machine can connect to an 802.1X network as a client device. Configuring the IEEE 802.1X Authentication Settings
Preventing Trouble Caused by Erroneous Sending
 | Erroneous sending to the wrong destination or careless mistakes such as entering the wrong fax number can lead to leaks of confidential information. The machine provides various measures for increasing security when sending, such as limiting the destinations that can be sent to and forcing the fax number to be entered twice before sending. Use the following functions as security measures for preventing trouble caused by erroneous sending. |
Address Book PIN
You can set an access number for important business contacts and other destinations in the Address Book that you do not want to display to all users. Restricting Access to Destinations Registered in the Address Book
Manage Address Book Access Numbers
You can prevent the leakage of sensitive or personal information from the Address Book by setting a PIN or preventing certain destinations from being displayed in the Address Book. You can also hide the Address Book itself. Hiding the Address Book
Restrict Address Book Use
Set whether to hide the Address Book and one-touch buttons. You can specify separate settings for Fax as well as Scan and Send. Restricting Use of the Address Book
Restrict New Destinations
The destinations that can be specified when sending faxes or scanned documents can be restricted to those registered in the Address Book or one-touch buttons, those registered in <Favorite Settings> or <Send to Myself>, or those that can be searched on the LDAP server. Restricting New Destinations
Limit E-Mail to Send to Myself
You can set restrictions so that users who log in with personal authentication can only send scanned documents to their own e-mail address. Restricting E-Mail Destination to <Send to Myself>
Restrict File TX to Personal Folder
You can set restrictions so that users who log in with personal authentication can only send scanned documents to their Personal folder. Restricting File Send Destination to Personal Folder
Restrict Sending to Domains
You can restrict e-mail and I-fax destinations so that only addresses in a specific domain are available. When a domain is specified, you can also set whether to allow sending to subdomains. Restricting the Domain of Send Destination
Confirm Entered Fax Number
You can require users to enter a fax number twice for confirmation before sending faxes, to prevent misdialing. Confirming Fax Numbers before Sending
Allow Fax Driver TX
You can prohibit users from sending faxes from a computer. Restricting Fax Sending from a Computer
Confirm Before Sending When Fax Dest. Included
You can set the machine to display a confirmation screen when sending to a fax destination. Displaying a Confirmation Screen for Fax Destinations
Previewing Documents before Sending
You can check scanned images on the preview screen before sending. Checking Scanned Images Before Sending (Preview)
Preventing Leaks of Confidential Information during Operation of the Machine
 | The machine generates value as an information asset by storing important data. Preventing confidential information from remaining on the machine after disposal is another important security measure. The machine provides various measures for increasing security of operation, such as preventing unregistered users from operating the machine, and completely erasing temporary job data when the machine is started. Use the following functions as security measures for preventing leaks of confidential information during operation of the machine. |
Verify System at Startup
The integrity of the firmware, system, and AddOn applications in the machine are verified during startup. <System Verification Settings>
Trellix Embedded Control
When the machine is operating, the Trellix Embedded Control function is used to prevent unauthorized program modification and the execution of unauthorized programs, for improved system reliability. <System Verification Settings>
Personal Authentication Management
A user name and password can be used to perform personal authentication of users. Preventing unauthorized access by third parties and setting usage restrictions can maintain a higher level of security and enable more efficient operation of the machine. Managing Users
Encrypting the Data in the Memory/Storage
You can automatically encrypt the data in the memory/storage to prevent information leaks caused by the removal of the storage. Managing Data in the Memory/Storage
Initialize All Data/Settings
You can restore all of the machine settings to the factory default values. All of the data that remains on the storage device is overwritten with 0 (null) data, which prevents the leakage of sensitive data when replacing or disposing of the storage device. Initializing All Data/Settings
Security Policy Settings
A security policy describes company-wide rules regarding information security. With this machine, multiple settings related to a security policy can be set together. Applying a Security Policy to the Machine
Allow Use of Default Password for Remote Access
You can set the machine to not allow users to log in to the Remote UI using the default password (7654321) of the "Administrator" user for security reasons. <Allow Use of Default Password for Remote Access>