Canon Paper Shredder manual

INTENT OF THIS DOCUMENT: Canon r ecogniz es the importance of information security and the challenges that your organiz ation faces. This white paper pr ovides information se curity facts for Canon imageRUNNER AD VANCE systems. It provides details on imageRUNNER ADV ANCE security technolog y for network ed and stand-alone envir onments, as wel l as[...]

2 White Paper: Canon imageRUNNER ADVANCE Security 1. Introduction . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 3 2. Devic e Security . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 5 3. Information Sec urity . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . 12 [...]

3 White Paper: Canon imageRUNNER ADVANCE Security Section 1 — Intr oduction “If you look at these machines as just copiers or printers, you first wonder if you really need security. Then you realize conventional office equipment now incorporates significant technology advances and capabilities that make all documents an integrated part of a cor[...]

1.1 — Security Mark et Overview In today’s digit al world, risks to networks and dev ices come in more forms and from more directions than ever before. From identity theft and intellectual property loss to infection b y viru ses and T rojan horses, IT adminis trators toda y find themselves pl aying an addition al role of security officer to ade[...]

2.1 – imageRUNNER AD V ANCE C ontro ller Security The imageRUNNER AD V ANCE series i s built upon a new pl atform that pro vides powerful enhanc ements to security and productiv ity. The new arc hitecture c enters on a new operating sys tem powered by an embedded version of Linux, which is quickly becoming the most widely adopted platform for sop[...]

Canon im ageRUNNER ADV ANCE systems also ship w ith S SO-H, which supports direct authentication again st an Active Directory domain u sing Kerber os or NTLMv2 as the authentication protoc ol. S SO-H does not require any additional softw are to perform the user authentication a s it is able to directly c ommunicate w ith the Active Directory domain[...]

2.3 – Acc ess C ontr ol Canon im ageRUNNER ADV ANCE systems sup por t a number of acc ess c ontrol options to help you manag e the use of devic e settings and function s in addition to specific capabilities of certain functions. A cc ess c ontrol solution s for the imageRUNNER AD V ANCE c an help Authentication, Authorization, and Auditing. C ano[...]

The following describes the various Ba se a cc ess levels (roles) that are available: The followin g functions and feat ures can be re stricted: 8 White Paper: Canon imageRUNNER ADVANCE Security Section 2 — Devic e Se curity Privile ges by Ac ces s Level Predefined Rol e Acc ess Privil eges Administrator Given priv ileges to oper ate all devic e [...]

When the Acc ess Management Sy stem has been enabled, users must log in to the devic e using SSO user authentication. A cc ess Man agement System s upports authentication through local device authentication as well a s Active Directory using SSO-H*, whic h includes s upport for Kerberos Authentication. Onc e a user logs into the dev ice with their [...]

Ac cess C ode for Addres s Book End-users w ill also have the c apacity t o place an ac ce ss number code on a ddresses in the Addr ess Book. When regi stering an addres s, users can then enter an Ac ce ss Number to restrict the display of that entr y in the Address Book. This fu nction limits the displ ay and use of an ad dress in the Address Book[...]

Print Driv er Security F e atur es Print Job Ac cou nting A standard fe ature in C anon’s printer drivers, print job ac cou nting requires users to enter an administr ator-defined passw ord prior to printing, thereby restricting devic e acc ess t o those authorized to print. Printing re strictions c an be set using Dep ar tment ID credentials or [...]

Protecting your or ganization’s c onfidential information i s a miss ion that C anon take s seriously . From your documents, f axes and e-m ails to the underly ing data on the intern al hard disk drive and in memory, C anon has built in many controls to help ensure that y our information does not become c ompromised. 3.1 – Document Security Sec[...]

Document St or ag e Sp ac e Pr ot ection Mail Box Security Eac h imageRUNNER AD VANC E system ships s tandard with Mail Bo xes for storage of sc anned and printed data. Mail Bo x security is provided by the ability to designate a u nique password for ac ces s. Once a document is stored in the Mail Box (if the Mail Bo x i s passw ord protected), a u[...]

14 White Paper: Canon imageRUNNER ADVANCE Security Administrators can mana ge the Advanced Bo x f eature through the Remote UI interf ace and perform the followin g actions: • Create user ac cou nts and define type (Admin vs. End U ser) • Activate authentication and enab le Personal Space • Register network devic es for remote ac cess • Sel[...]

15 White Paper: Canon imageRUNNER ADVANCE Security Digital Signature PDF (Dev ice and U ser Signat ure) Within Scan and Send, users can ad d digital sign atures that verify the source and authenticity of a PDF or XPS document. When recipients open a PDF or XPS file th at has been saved with a digital s ignature, they c an view the document’s prop[...]

16 White Paper: Canon imageRUNNER ADVANCE Security The Sc an Loc k fe ature enab les the follo wing restrictions to be applied to a document: • Compl ete Restriction: No one can m ake any copy/send/fax. • Password Authentication: Allows the ability to make copy/send/f ax only if the proper password is e ntered. • User Authentication: Al lows [...]

17 White Paper: Canon imageRUNNER ADVANCE Security information from env ironments, where sensitive inform ation is proc essed, by an alyzing the hard disk s from these devic es. In order to help protect your sensitive and c onfidential information C anon imageRUNNER AD VANC E systems include a standard hard di sk form at utility , as well as more a[...]

HDD Data Era se Kit The optional HDD Dat a Erase Kit en ables sy stem administr ators to configure their imageRUNNER AD V ANCE to ov erwrite the internal image server hard disk and erase prev ious data as part of routine job proc essing. The tec hnology can be set to o verwrite: 1. Once w ith null dat a, 2. Once w ith random data, 3. Three times wi[...]

Please see below for o verwrite examples of what oc curs on the devic e in certain jo b modes using a jo b consi sting of three sets of three originals. 1 1 . . C C o o p p y y / / P P r r i i n n t t M M o o d d e e : : a a . . G G r r o o u u p p S S o o r r t t When a user programs a job to be sorted into group sets with no fini shing specified,[...]

2 2 . . M M a a i i l l B B o o x x P P r r i i n n t t a a . . M M a a i i l l B B o o x x P P r r i i n n t t When a user prints a jo b stored in the Mail Bo x, all pag es wil l be overwritten immediately after the entire job h as printed out. 3 3 . . S S e e n n d d / / S S c c a a n n J J o o b b a a . . S S e e n n d d / / S S c c a a n n d d [...]

Essential s W orkflow C omposer Canon im ageRUNNER ADV ANCE Essentials includes the Workflo w Composer c omponent to enable u sers and administr ators to cre ate custom workflows that automate redu ndant task s and provide int egration with bac k -end systems via connectors. Adminis trators are able to creat e workflows for user s to reduce err ors[...]

3.3 – Fax Security S uper G3 F ax Boar d and M u lti Line F ax Bo ar d Canon im ageRUNNER ADV ANCE systems th at support S uper G3 fax c apabilities with the optional Super G3 Fax Board instal led can be connected to the P ublic Switc hed T elephone Network f or sending and receiv ing of fax data. In order to m aintain the security of c ustomer?[...]

Advanc ed Box Fax Forwardin g & Fax Received Notific ation Similar to the Fax Forwarding function, im ageRUNNER ADV ANCE systems support the c apability to define separate forwardin g rules ba sed on the line upon which the f ax wa s receiv ed. Each fax can be routed to a spec ific shared or personal space Adv anced Bo x location, d atabase, fi[...]

4.1 – Network and Print Security (C anon Network Printer Kit Only) Canon imag eRUNNER ADV ANCE sy stems include a number of highly configurable netw ork security featur es that assist in securing information when the optional Network Print Kit is in stalled. Standard network security features include the ability to permit only authorized u sers a[...]

IP Ad dr e ss Filt erin g Using the RX/Print Settings function, the Syst em Manager c an limit network acc ess to the dev ice to specific IP a ddresses or ranges for printing and Settings/Brow sing. Up to eight indiv idual or consecutiv e address settin gs can be spec ified. Sub sequently, the Sys tem Manager c an also choo se to permit a ran ge of[...]

See the imageRUNNER AD V ANCE syst em manual for the spec ific devic e in question for additional instructions on registerin g IPSec-based security policies. Authentication and Encryption Method: One of the follow ing methods must be set f or the device. • AH (Authentication Header) A protocol for certifying authentication by detectin g modificat[...]

IEEE 802.1X Canon im ageRUNNER ADV ANCE systems support IEEE 802.1x, which i s a standard protoc ol for port- based Network Ac ces s C ontrol. The protoc ol prov ides authentication to devic es att ached to a LAN port and estab lishes a point-to-point connection only if authentication is s ucc essful. The Ext ensible Authentication Protoc ol (EAP) [...]

There are three poss ible scen arios that are explored: • • D D a a t t a a w w i i t t h h a a v v i i r r u u s s a a t t t t a a c c h h e e d d i i n n t t h h e e e e - - m m a a i i l l : : All fil e attachments exc ept for ‘TIFF” files r ecei ved in the e-mail are di scarded immediately after rec eption. • • V V i i r r u u s s e[...]

Canon pro vides a number of t ools to help organiz ations enf orc e their internal company polic ies and meet regul atory requirements. Whether a single imag eRUNNER ADV ANCE sy stem is deplo yed, or a fleet of them, these so lutions prov ide the ability to audit us age and limit ac ces s to feat ures and functions enterprise-wide—at the group an[...]

Few security pr ocedures can compl etely prevent the intention al leak of c onfidential information while maintainin g high productivity , but if an oc currenc e does happen it is important to be ab le to trac e it to the sourc e. Canon ha s developed a number of cutting -edge techno logies to provide a dministrators with powerful w ays to di scour[...]

6.2 – Canon im ageWARE Acc ounting Manag er Canon im ageWARE Ac cou nting Manager pro vides enh anced audit tr acking c apabilities t o the end-user environment. In addition to tr ackin g usage b y Department ID or S SO acc ount, imageW ARE Ac counting Manag er in conjunction with SSO w ill pr ovide the ability to track usage per indiv idual user[...]

Canon i s dedicated to pro viding the most sec ure mu ltifunctional printers available on the m arket today . Many of our products meet or ex ceed the requirements of government ag encies and priv ate entities as they relate to sec urity certification s and industry regul ations. 7.1 – C ommon C riteria Beginning on July 1, 200 2, the Depart ment[...]

7.3 – Authorized Send for CAC/PIV Designed to meet the needs of the United States D epartment of Defense and numerous government agencies, the Authoriz ed Send for CA C/PIV option for imag eRUNNER ADV ANCE sy stems prov ides a means for the device s maintain high productiv ity for walk -up users to output hard c opies of the documents they need w[...]

Since initial ly introduced, the high ly succ essful Canon imag eRUNNER series of devic es h ave rapidly grown in both the breadth and depth of features and functions. With e ach rele ase, these devic es have become incre asingly integrated within the IT and network infras tructure. As with any networked devic e, imaging and printing devic es must [...]

9.1 – Canon Security R ecommendations Quic k R eferenc e Each c ustomer’s needs are different, and while the security of c orporate data is ultimately the respon sibility of the customer, the sec urity tec hnologies outlined below ma y help support your organiz ation's information security need s. The follo wing actions are rec ommended by[...]

36 White Paper: Canon imageRUNNER ADVANCE Security 9.2 – Canon im ageRUNNER AD V ANCE HDD Security Section 9 – Addendum C ommon Crit eria C ertification EAL3 N/A Supported Device s iR ADV C5051, C5045, C50 35, C5030 , C7065, C7055, C90 75 PRO, C9065 PRO iR ADV C5051, C5045, C50 35, C50 30, C7065, C7055, C90 75 PRO, C9065 PRO Activation Ins tall[...]

The information prov ided in this document is the most current information av ailable at the time of its creation. C anon hereby expre ssly disc laims all w arranties of any kind, expres s or implied, statutory or non-st atutory, in relation to the information prov ided in this document. In no event shal l Canon, C anon’s subsidiarie s or affilia[...]