Recommended Security Settings - 5. Public Network
This sheet provides a list of the security settings configured for this environment type.
Security settings are configured to respond to the threats of unauthorized access to information by the general public.
IMPORTANT
- These settings do not completely guarantee the security of the machine.
- The item names in this list of settings may differ or not exist, depending on the model of your machine.
Security Settings Configured for This Environment Type
The values are reflected for the following settings.
[LUI]: Settings on the control panel.
[RUI]: Settings in the Remote UI.
| Item | Setting Value | Threat Responded to | |
|---|---|---|---|
| [LUI]: Settings > Printer settings > Other printer settings > Wi-Fi pairing settings > Enable/disable pairing | Disable | ||
| [LUI]: Settings > Printer settings > Other printer settings > Wi-Fi pairing settings > Allow/block additional pairing | Disable | ||
| [LUI]: Settings > Printer settings > Firmware update > Update notification settings | Enable | Denial of Service | |
[LUI]: Settings > Printer settings > LAN settings > Advanced > WSD settings > WSD scan from this printer [RUI]: System info and LAN settings > LAN settings > Advanced setup > WSD settings > WSD scan from this device |
Disable | Tampering | Repudiation |
[LUI]: Settings > Printer settings > LAN settings > Advanced > LPD settings [RUI]: System info and LAN settings > LAN settings > Advanced setup > LPD settings |
Disable | Tampering | Information Disclosure |
[LUI]: Settings > Printer settings > LAN settings > Advanced > RAW settings [RUI]: System info and LAN settings > LAN settings > Advanced setup > RAW settings |
Disable | Tampering | Information Disclosure |
| [RUI]: System info and LAN settings > LAN settings > Advanced setup > SNMP settings > SNMPv1 settings | Disable | Information Disclosure | |
| [LUI]: Settings > Web service setup > Web service connection setup > Canon Inkjet Cloud Printing Center setup > History setting for this service | Do not save | Spoofing | Information Disclosure |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Maximum | 1.3 | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Minimum | 1.2 | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Encryption algorithm > AES-256-CBC | On | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Encryption algorithm > AES-128-CBC | Off | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Encryption algorithm > AES-256-GCM | On | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Encryption algorithm > AES-128-GCM | Off | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Key exchange algorithm > RSA | On | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Key exchange algorithm > ECDHE | On | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > Key exchange algorithm > X25519 | On | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > HMAC algorithm > SHA1 | Off | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > HMAC algorithm > SHA256 | On | Information Disclosure | |
| [RUI]: Security > TLS server settings > Advanced TLS settings > HMAC algorithm > SHA384 | On | Information Disclosure | |
|
[LUI]: Settings > Printer settings > LAN settings > Advanced > Easy wireless connect [RUI]: System info and LAN settings > LAN settings > Advanced setup > Easy wireless connect settings |
Disable | Information Disclosure | |
| [RUI]: Security > Encryption settings > Prohibit use of weak encryption | On | Tampering | Information Disclosure |
| [LUI]: Settings > Printer settings > Security settings > Use of Remote UI | Restrict | Tampering | Information Disclosure |
