Restrict printing to Toshiba copiers

KB Home   |   Restrict printing to Toshiba copiers

Restricting Direct Printing on Toshiba via the Print Data Converter

As the Print Data Converter is installed on each Toshiba SDK 1 EBX and SDK 2 EBX to ensure that the Toshiba MFP does not attempt to track print jobs or restrict them in any manner, as a consequence of the Print Data Converter and it’s functionality it also allows for direct printing to each MFD thus allowing users to potentially bypass PaperCut.

The Toshiba recommend way to control this type of direct printing is to enable and configure “Network Filtering”, Network Filtering allows site administrators to “permit” and/or “deny” certain addresses and address ranges the ability to access the copier.

This includes permitting and denying print jobs and access to the web based administration console “Top Access”

Configuration

How to access Network Filter Toshiba EBX (include SDK 1 and SDK 2)

  1. Log in to Top Access as an “Administrator”.
  2. Select the tab “Administration”
  3. Under “Setup”, select “Network”.
  4. Select the link for “Filtering”.
  5. Select “Filtering”.
  6. Click the drop down “Enable IP Filtering” and select “Enable”.
  7. From the drop down “IP Filtering Rule” chose the appropriate rule i.e. “Permit” or “Deny”.
  8. Enter a “Start Address” and “End Address” for “permitting” or “denying” (depending on the rule selected).
  9. Once completed, click “Ok” and then “Save” on the next screen.
  10. With “Save” selected a dialogue box will be resented advising that “When this configuration is changed, the network connection will be disconnected. Would you like to continue?” click “OK” and the device will perform and “soft reboot”.
  11. “Filtering” will now apply on the configured device.

Scenarios for use

As there are numerous way to configure “Filtering” to either “Permit” or “Deny” network access to an MFD or MFDs, please see the scenarios below for examples on how to apply “Filtering” with PaperCut.

Scenario One: All access or printing to each MFD is “denied” other than from the PaperCut Application Server, in the “Filtering Rule” select “permit” and enter the TCP/IP address of the Application server in both the “Start Address” and also in the “End Address” thus only allowing access and printing from the Application Server TCP/IP address.

Scenario Two: All access or printing to each MFD is “denied” other than from the PaperCut Application Server and allowing selected access and direct printing for “NON PAPERCUT CONTROLLED PRINTING”, in the “Filtering Rule” select “permit” and enter the HOST TCP/IP address of the PaperCut Application server in the “Start Address” and also in the “End Address” thus only allowing access to from the Application Server TCP/IP address.

Then to allow NON PAPERCUT CONTROLLED PRINTING from a selected HOST system add an additional “Filter”, under “Filtering Rule” select “permit” in the “Start Address” and also the “End Address” enter the TCP/IP address of the HOST e.g. VMS, UNIX etc. allowed to print directly to a MFD or MFDs.

Please Note: The scenarios shown are for example only, there are numerous ways that “Filtering” can be applied and each site has the potential to be different.

Important Information

With “Network Filter” enabled there are points to consider prior implementing, please see below.

  • Access to TOP ACCESS will be restricted unless “white listed”.
  • Shared Print Queues on Application Server MUST be configured correctly with “automatic update” enabled i.e. Finishers, Paper Cassettes etc., SNMP and “Automatic Update” on connected “clients” will no longer function.

Categories:


Keywords:

Comments

Share your findings and experience with other PaperCut users. Feel free to add comments and suggestions about this Knowledge Base article. Please don't use this for support requests.

Article last modified on September 03, 2012, at 07:46 AM
Printable View   |   Article History   |   Edit Article