Konica Minolta IC-308 - Manual (Page 6)

6
3.3.3 Certificate Management
Certificates are used by the network clients to authenticate
themselves in network activities that perform identity
verifications. The certification method is supported by SSL/
TLS that implements authentication through the exchange
of certificates based on public/private keys according to the
X509 standard.
In the Fiery server, certificate management allows the
Fiery Administrator to do the following:
• Add, load or browse for available digital certificates
created by a trusted authority and private keys.
• Create self-signed digital certificates.
• View details for available digital certificates.
• Assign or associate an available digital certificate for
a particular service, such as Web Services.
• Add trusted certificates created by a trusted authority.
3.4 IEEE 802.1x
802.1x is an IEEE standard protocol for port-based network
access control. This protocol provides authentication to
devices attached to a LAN port and establishes a point-to-point
connection only if authentication is successful.
When 802.1x is enabled, the Fiery server uses one of the
two EAP methods to seek authentication from an 802.1x
authentication server (such as a RADIUS server), often
through an intermediate access point (an authenticator).
The Fiery server seeks this authentication at start-up time or
when the Ethernet cable is disconnected and reconnected.
Once authenticated, the Fiery server is granted access to
the network.
3.5 SNMP v3
The Fiery server supports SNMPv3 as it is a secured
network protocol for managing devices on IP networks.
SNMPv3 communication packets can be encrypted to
ensure confidentiality. It also ensures message integrity
and authentication.
The Fiery Administrator can select from three levels of security
using SNMPv3. The Fiery Administrator also has the option to
require authentication before allowing SNMP transactions and
to encrypt SNMP user names and passwords.
3.6 Email Security
The Fiery server supports the POP and SMTP protocols.
To protect the service against attack and improper use, the
Fiery Administrator can enable additional security features
such as follows.
3.6.1 POP before SMTP
Some email servers still support unsecured SMTP protocol
that allows anyone to send email without authentication.
To prevent unauthorized access, the Fiery server supports
the ability for the Administrator to enable or disable the POP
authentication before SMTP. POP authentication before
SMTP forces a successful login to a POP server prior to
being able to send email via SMTP.
3.6.2 OP25B
Outbound Port 25 Blocking (OP25B) is an anti-spam ISP
measure by which the ISP checks the IP address and the port
number of all accesses through its routers and blocks access
to port 25 from dynamic IP addresses on its network. The
Fiery server provides the Administrator the ability to specify
different port numbers besides 25 for outgoing email service.