Canon Large Format Inkjet Printer User Guide

Canon Large Format Inkjet Printer

Product Information

The Canon large-format inkjet printer is a versatile device that provides various useful functions, including network printing, print job control through Remote UI, and browsing print history. This printer is designed to operate, store, and transmit data securely and accurately, with minimal impact on security and network infrastructure.

Intended Audience
This product is intended for use by network administrators, dealers, and other business customers who have a good understanding of their network environment, application restrictions, and operating system.

Limitations
The provided guide focuses on features of the printer that have a discernible impact on the network environment, security, or customer resources. Some information may be revision-specific, and periodic revisions may occur. It is recommended to consult with an Authorized Canon Service Provider for the appropriate deployment in your environment.

Introduction
By connecting the large-format inkjet printer to a network, users can take advantage of various useful functions. However, it is essential to protect the printer from unauthorized access. This document provides methods for securing the printer in a network environment.

Product Usage Instructions

Method 1: Use a Private IP Address
It is recommended to use a private IP address for your large-format inkjet printer. Private IP addresses are accessible only within the same local area network (LAN) and provide an additional layer of security. Ensure that your printer’s IP address falls within the following private IP address range:

• Private IP address range: 10.0.0.0 – 10.255.255.255
• Note: Even if your printer uses a global IP address, you can still reduce the risk of unauthorized access by blocking external network access through a firewall. Consult with your corporate network administrator for assigning a global IP address to your printer.

Method 2: Use a Firewall or Wi-Fi Router
To further limit communication and enhance security, consider using a firewall or Wi-Fi router. These devices can help control and restrict access to your large-format inkjet printer from external networks. Configure the firewall or router settings according to your network requirements and consult with your network administrator for assistance.

Method 3: Set a Password to Your Printer
Protect your printer from unauthorized access by setting a strong password. Refer to the user manual provided with your machine for detailed instructions on setting a password specific to your printer model. Ensure that the password is unique, not easily guessable, and periodically change it for enhanced security.

Method 4: Precautions when Using Remote UI
When utilizing the Remote UI feature, which allows controlling print jobs through the HTTP protocol, it is crucial to take precautions to prevent unauthorized access. Follow the guidelines provided in the user manual to secure Remote UI access, such as setting up secure login credentials and restricting access rights to authorized users only.

For more detailed information and specific instructions, please refer to the user manual provided with your large-format inkjet printer.

IMPORTANT
If you are an administrator, please read through this document.

Objectives
This guide provides additional information related to the Canon large-format inkjet printer, and in particular, steps you can take to enhance the secure operation of this device. This document will help you better understand how the device functions and will help you feel confident that it operates, stores or transmits device data in a secure and accurate manner, including any potential impact on security and network infrastructure.

We recommend that you read this document in its entirety and take appropriate actions consistent with your information technology security policies and practices as an enhancement to your organization’s existing security policies. Since security requirements will vary from customer to customer, you have the final responsibility to ensure that all implementations, re-installations, and testing of security configurations, patches, and modifications are appropriate and required for your environment.

Intended Audience
This guide is intended for use by network administrators, dealers and other business customers. In order to get the most from this guide, you should have an understanding of:

• your network environment,
• any restrictions placed on applications that are deployed on that network, and
• the applicable operating system.

Limitations to this Guidance
This guide is meant to help you evaluate the device and the security of your network environment, but it cannot be a complete information source for all potential customers. This guide proposes a hypothetical customer printer environment; if your network environment differs from the hypothetical environment, your network administration team and your dealer or Authorized Canon Service Provider must understand the differences and determine whether any modifications or additional action is needed. Additionally:

• This guide only describes those features within the application that have some discernible impact to the general network environment, whether it be the overall network, security, or other customer resources.
• The guide’s information is related to the specified Canon device above. Although much of this information will remain constant through the device life cycle, some of the data is revision-specific, and will be revised periodically. IT organizations should check with their Authorized Canon Service Provider to determine the appropriate deployment for your environment.

Thank you for using Canon products. This document gives information on how to protect your large-format inkjet printer (“LFP”) from unauthorized access from an external network. Users and system administrators are advised to read through this document before using an LFP in a network environment.

INTRODUCTION

• In recent years, by connecting your LFP to a network, you can make use of various useful functions, such as printing via the network, controlling print jobs using Remote UI, which uses the HTTP protocol, and browsing the machine’s print history.
• The following are methods for protecting your LFP from unauthorized access when used in a network environment.
• Setting procedures and illustrations described here are examples provided for reference and may differ from those of your LFP. For more information, please refer to the user manual provided with your machine.

Methods for protecting your LFP from unauthorized access:

1. Use a private IP address.
2. Use a firewall or Wi-Fi router to limit communication.
3. Set the password to your printer.
4. Note: Precautions when Using Remote UI

USE PRIVATE IP ADDRESS

An IP address is a number that is assigned to each device on a network. An IP address that is used to connect to the Internet is called a “global IP address,” while an IP address within a local area network (LAN) is called a “private IP address.” If a machine uses a global IP address, it becomes accessible by the general public, which raises the possibility of information leakage due to unauthorized access by third parties. On the other hand, if a machine uses a private IP address, then it can only be accessed by users connected to the same LAN.

In general, Canon recommends that you use a private IP address for your LFP. An IP address that falls within the ranges listed below is a private IP address. Please check that your LFP’s IP address is a private one.

Private IP address range:

• 10.0.0.0-10.255.255.255
• 172.16.0.0-172.31.255.255
• 192.168.0.0-192.168.255.255

NOTE
Even if your LP uses a global IP address, you can reduce the risk of unauthorized access by blocking access from an external network through such methods as using a firewall. Please consult with a corporate network administrator when assigning a global IP address to your LFP.

How to check your printer’s IP address

Example

Note:
For more information about how to verify the IP address of your LFP, please refer to the user manual included with your machine.

RESTRICT COMMUNICATION BY USING FIREWALLS

A firewall is a system that prevents not only access by external networks, but also attacks on and intrusions to a local network. Firewalls can block potentially dangerous unauthorized access from external networks by restricting specified external IP addresses from accessing a network environment. IP addresses can also be filtered using functions included in a Canon LFP.

IP Address Range Setting Screens

• Remote UI includes a function for selecting an IP address range.
• Note: For more information regarding operating Remote UI, please refer to the LFP’s user manual.

NOTE
Remote UI (User Interface) is software that allows you to access the LP from a Web browser. Remote UI allows users to verify and modify various printer settings without having to operate the machine directly. Users can access the Remote UI’s portal page from a computer screen by entering the machine’s IP address into a Web browser.

Note: For more information regarding operating Remote UI, please refer to the LP’s user manual.

PPROTECT LFP DATA WITH PASSWORDS

By setting a password, you can protect various data on your LFP and significantly reduce the risk of information leakage in case the machine is hacked.

Note:

• If a default password has been set, change it.
• No password is set by default depending on the printer model. Set the password.
• For specific procedures for setting the password, refer to the Instruction Manual of the printer.
• A password can be set for the machine’s data storage box using Remote UI. (A data storage box is only included in models employing a hard disk.)

MEMO
Printers have the password functionality for printer protection. What is important for your security is the proper use of the password. Keep the following in your mind in using the password:

• Always set the password.
• Change the password periodically.
• Avoid using an easy-to-guess password.
• DO NOT tell the password to others.

Password Setting Screens

LFP Operation Panel
System Administrator Information input screen

Remote UI
Remote UI login password screen

LFP Operation Panel
Data storage box password input screen

Remote UI
Data storage box password screen

NOTE

Precautions when Using Remote UI

• Do not access other websites when the browser is accessing the Remote UI of your LFP.
• Do not forget to close the web browser if you step away from the computer or after you finish changing settings.

Revision history:
January 1, 2023. The UI displays have been updated.

Canon Inc. 2023.

Read User Manual Online (PDF format)

Download This Manual (PDF format)

Download this manual  >>