4.1 – Network and Print Security (Canon Network Printer Kit Only)
Canon imageRUNNER ADVANCE systems include a number of highly configurable network security features that assist in
securing information when the optional Network Print Kit is installed. Standard network security features include the
ability to permit only authorized users and groups to access and print to the device, limiting device communications to
designated IP/MAC addresses, and controlling the availability of individual network protocols and ports as desired.
Enabling/Disabling Protocols/Applications
Through Canon’s device setup and installation utilities, network administrators are provided with the ability to configure
the specific device protocols and service ports that are accessible. As a result, unwanted device communication and
system access via specific transport protocols can be effectively blocked.
Canon imageRUNNER ADVANCE systems have the ability to disable unused TCP/IP ports to further secure the devices.
Disabling ports affects the available functions and applications on the device. Configurable ports* include:
24
White Paper: Canon imageRUNNER ADVANCE Security
Section 4 – Network Security
Name Port Description Setting location Functions Impacted By This Port
FTP TCP 21 File Transfer [Control]
Settlings / Registration > Preferences > Network>
TCP / IP Settings> FTP Print Settings
If disabled, FTP printing/scanning options
will be disabled.
SMTP TCP 25 Simple MailTransfer Protocol
Settlings / Registration > Preferences > Function Settings >
Send > Email / I-FaxSettings Communication Settings
E-mail and I-Faxsending capability are enabled
through this function.
HTTP TCP 80 World Wide Web HTTP
Settings / Registration > Preferences > Network>
TCP / IP Settings> Use HTTP
No access to the imageRUNNER Remote UI utility if
disabled. Printing over IPP will cease if disabled.
netbios-ssn TCP 139 NETBIOS Session Service
Settings / Registration > Preferences > Network>
SMB Server Settings > Use SMB
Scanning to a windowsfolder will be affected.
HTTPS TCP 443
HTTP protocol over TSL/SSL. Can be
used with the following functions:
If enabled, all network traffic between user pc
and imageRUNNER device via the
Remote UI utility issecure.
Remote UI
Settings / Registration > ManagementSettings > License /
Other > Remote UI > SelectOn > Use SSL, Select On or Off
MEAP Settings
Settings / Registration > ManagementSettings > License /
Other > MEAP Settings > SSL Settings > Select On or Off
IPP Print Settings
Settings / Registration > Preferences> Network > TCP/IP
Settings > IPP PrintSettings > Select On >
Use SSL, Select On or Off
Device Information
Delivery Settings
Settings / Registration > ManagementSettings > Device
Management > Device Information Delivery Settings> Restrict
Receiving for Each Function > Select On or Off
Confirm Department ID PIN
Settings / Registration > Preferences> Network > TCP/IP
Settings > Confirm Department ID PIN > Select On or Off
E-Mail/I-Fax: Authentication/Encryption
Settings / Registration > Function Settings > Send >
E-Mail/I-FAXSettings > Communication Settings >
Authent./Encryption > Allow SSL(SMTP Receive),
Allow SSL (SMTP Send), and Allow SSL (POP)
PRINTER TCP 515 Spooler
Settings / Registration > Preferences > Network>
Use SpoolFunction > Select On or Off
Disabling this protocol will cease Printing over LPR.
IPP TCP 631 IPP (Internet Printing Protocol)
Settings / Registration > Preferences> Network > TCP / IP
Settings > IPP PrintSettings > Select On or Off
Disabling this protocol will cause Printing over IPP
protocol to stop.
HTTP (Meap) TCP 8000 World Wide Web HTTP for MEAP
Settings / Registration > ManagementSettings >
License / Other > MEAP Settings > SSL Settings>
Select On or Off
Disabling this feature disables access
to MEAP SMS Page and other MEAP applications
such as iWAM for MEAP.
RAW TCP 9100 Standard TCP/IP Printer (RAW)
Settings / Registration > Preferences > Network> TCP / IP
Settings > RAW PrintSettings > SelectOn or Off
Disabling this feature causesPrinting over
Std TCP/IP protocol to stop.
SNMP UDP 161 Simple NetworkManagement Protocol
Settings / Registration > Preferences> Network > TCP / IP
Settings > SNTP Settings > Select On or Off
Disabling this feature willresult in imageRUNNER
devicesnot being discovered or manageable by
device management utilities such as iWEMC.
* Used ports and default port settings may vary per model. Please consult your device manuals or contact your service technician for
additional details.