Xerox AltaLink C8035 User Manual

Xerox® Security Guide for Office Class Products: AltaLink®  VersaLink®
November 2018 Page 19
o Prevent impersonation (aka spoofing) of a printer/MFP
o Automatically prevent connection of non-approved print products
o Smart rules-based policies to govern user interaction with network printing products
 Provide simplified implementation of security policies for printers and MFPs by:
o Providing real time policy violation alerts and logging
o Enforcing network segmentation policy
o Isolating the printing products to prevent general access to printers and MFPs in
restricted areas
 Automated access to policy enforcement
 Provide extensive reporting of printing product network activity
AltaLink® Multifunction
VersaLink®
Multifunction
VersaLink® Printers
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070
B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030
B400, B600, B610, C400, C500,
C600, C7000, C8000, C9000
Network Access Control
Cisco ISE
Supported
Supported
Supported
Contextual Endpoint Connection Management
Traditionally network connection management has been limited to managing endpoints by IP address and
use of VLANs and firewalls. This is effective, but highly complex to manage for every endpoint on a
network. Managing, maintaining, and reviewing the ACLs (and the necessary change management and
audit processes to support them) quickly become prohibitively expensive. It also lacks the ability to
manage endpoints contextually.
Connectivity of AltaLink® and VersaLink® devices can be fully managed contextually by Cisco
TrustSec. TrustSec uses Security Group Tags (SGT) that are associated with an endpoint’s user, device,
and location attributes. SG-ACLs can also block unwanted traffic so that malicious reconnaissance
activities and even remote exploitation from malware can be effectively prevented.
FIPS140-2 Compliance Validation
When enabled, the product will validate its current configuration to identify cryptographic modules in use.
Modules which are not FIPS 140-2 (Level 1) compliant will be reported.
AltaLink® products include FIPS compliant algorithms of SNMPv3 and Kerberos, however an exception
can be approved to run these in non-FIPS compliant mode when configured for non-FIPS algorithms.
VersaLink® products use encryption algorithms for Kerberos, SMB, SNMPv3, and PDF Direct Print
Service that are not approved by FIPS140-2. They can however operate in FIPS140-2 approved Mode in
order to maintain compatibility with conventional products after an exception is approved by a system
administrator. They do not use FIPS compliant algorithms when in this configuration.
Additional Network Security Controls
Additional network security controls are discussed in the following sections.
Endpoint Firewall Options
AltaLink® Multifunction
VersaLink®
Multifunction
VersaLink® Printers
B8045, B8055, B8065, B8075,
B8090, C8030, C8035, C8045,
C8055, C8070
B405, B605, B615, B7025,
B7030, B7035, C405, C505,
C605, C7020, C7025, C7030
B400, B600, B610, C400, C500,
C600, C7000, C8000, C9000
Firewall
Stateful Packet Filter
IP Whitelisting
IP Whitelisting

Xerox AltaLink C8035 Specifications

General

Print Resolution	1200 x 2400 dpi
Monthly Duty Cycle	Up to 110, 000 pages
Standard Paper Capacity	1, 140 sheets
Maximum Paper Capacity	5, 140 sheets
Automatic Duplexing	Yes
Functions	Print, Copy, Scan, Fax
Recommended Monthly Print Volume	Up to 8, 000 pages
Processor	1.05 GHz Dual-core
Memory	4 GB
Paper Input (Standard)	1, 140 sheets
Scanner Resolution	600 x 600 dpi
Fax	Optional
Control Panel	10.1-inch color touchscreen
Energy Star Certified	Yes
Print Speed	Up to 35 ppm
Connectivity	Ethernet 10/100/1000 Base-T, USB 3.0, NFC
Supported Media Sizes	A3, A4, A5, B4, B5
Category	Multifunction Printer
Paper Sizes	A3, A4, A5, B4, B5
Scan Speed (Simplex)	Up to 80 ipm
Scan Speed (Duplex)	Up to 139 ipm
Maximum Paper Size	12.6 x 18 inches
Mobile Printing	Apple AirPrint, Google Cloud Print, Xerox Print Service Plug-in for Android
Operating System Compatibility	Windows, Mac OS, Linux
Hard Drive	320 GB (expandable to 1 TB)

Summary

3 User Data Protection

Data Protection within Product

Covers encryption, TPM chip, and media sanitization for data stored on the device.

Encryption and TPM Chip

Details AES-256 encryption and the Trusted Platform Module for secure key storage.

Media Sanitization (Image Overwrite)

NIST SP 800-88 Rev1 compliant method to securely erase user data on magnetic media.

Data in Transit Protection

Details protection for data submitted to or sent from the product.

4 Network Security

Network Encryption and Protocols

Covers IPSec, Wi-Fi WPA, TLS, PKI, and certificates for secure network communication.

Device and Trusted Certificates

Network Access Control and Firewalls

5 Device Security

Pre-Boot and Boot Process Security

Covers BIOS protection, firmware integrity, and embedded encryption.

BIOS Security

Firmware Integrity

Runtime Security and Monitoring

7 Identification, Authentication, and Authorization

Authentication Methods

Covers local, network, smart card, and convenience authentication options.

Local, Network, and Smart Card Auth

Details local database, remote servers, and smart card options for user authentication.

Password Policy

Authorization and Access Control

Manages user permissions, remote access, and local access based on roles.

Role Based Access Control (RBAC)

Appendix A: Product Security Profiles