Filter
Top Products
There are three possible scenarios that are explored:
•• DDaattaa wwiitthh aa vviirruuss aattttaacchheedd iinn tthhee ee--mmaaiill::
All file attachments except for ‘TIFF” files received in the e-mail are discarded immediately after
reception.
•• VViirruusseess pprreetteennddiinngg ttoo bbee TTIIFFFF ffiilleess::
TIFF image files are compressed with formats such as MH, MR, and MMR. The imageRUNNER
ADVANCE system compresses the ‘TIFF’ format at reception and after regenerating the image
encodes the image again. When processed correctly, the original image is discarded and a new
image is created, printed, and transferred. If an error occurs during the process, the data from
the ‘TIFF’ file is not transferred but is discarded, and a message notifying the user of the error
is added to the e-mail text and is printed.
•• TTeexxtt wwiitthhi
inn ee--mmaaiill iiss aa vviirruuss::
E-mail text data gives the Date, From, Message-Id, To, or Subject data written at the top of the
received e-mail for printing and transfer. The e-mail text data is comprised of character strings.
If binary data such as data with a virus is used in the e-mail text, the data will be damaged and
data with a virus will be discarded. Even if the data with a virus is visible data with a script for-
mat, it is not possible to recognize it as a script because Date, From, Message-Id, To, or
Subject data is attached at the top.
4.2 – Mail Server Security
When the Scan and Send on imageRUNNER ADVANCE devices is enabled, the internal mail service is
enabled and supports the POP and SMTP protocols. To protect the service against attack or improper
use, administrators can enable additional security features such as SMTP Authentication and POP
Authentication before SMTP.
SMTP Authentication
To prevent unauthorized users from making use of the device’s internal SMTP server, administrators
can enable SMTP Authentication and designate a username and password to connect to the server.
In addition, administrators can enable SSL for all SMTP send and receive operations.
POP Authentication Before SMTP
As an additional layer of security, imageRUNNER ADVANCE systems support the ability for
administrators to enable or disable the POP Authentication before SMTP feature. POP Authentication
before SMTP forces a successful login to a POP server prior to being able to send mail via SMTP.
28
White Paper: Canon imageRUNNER ADVANCE Security
Section 4 – Network Security